CVE-2019-5343

HPE Intelligent Management Center (IMC) PLAT prior to 7.3 E0506P09 contains a remote code execution vulnerability in the compareFilesResult expression language handling. The flaw arises from how the beanName parameter is processed in compareFilesResult.xhtml, enabling an attacker to execute arbit...