CVE-2020-7170

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7170

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7170

HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07) is affected by a select expression language injection vulnerability that allows remote code execution. The root cause is improper handling/validation of the beanName parameter in the select.xhtml endpoint, enabling an attacker t...