CVE-2020-7143

A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7143

This CVE affects HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a faultDevParasSet expression language injection in iMC that allows remote code execution. The root cause is improper handling/validation of the beanName parameter passed to the faultDevParasSet.xht...