CVE-2020-7143

This CVE affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a faultDevParasSet expression language injection in iMC that allows remote code execution. The root cause is improper handling/validation of the beanName parameter passed to the faultDevParasSet.xht...