CVE-2017-8952

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8952

CVE-2017-8952 is an information disclosure vulnerability in HP SiteScope prior to/around 11.2x–11.3x where an unauthenticated remote attacker could access arbitrary files on the SiteScope host by exploiting improper authentication. Public docs describe it as a missing authentication issue (CWE-30...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...