CVE-2017-8951

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8951

HPE SiteScope 11.2x/11.3x contains an information-disclosure vulnerability (CVE-2017-8951). Credentials stored in Credential Profiles can be sent in plaintext over HTTP to the client, enabling potential disclosure. CERT/CC notes mitigation via updates, TLS/SSL enforcement, and restricted access; ...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...