HPE Intelligent Management Center Remote Code Execution (CVE-2019-11943)

An expression language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the SoapConfigBean class. Successful exploitation results in the execution of arbitrary code under the security conte...

CVE-2019-11943

CVE-2019-11943 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, present in versions earlier than 7.3 E0506P09. The flaw arises from improper handling of the beanName parameter in the SoapConfigBean/soapConfigContent endpoint, allowin...