CVE-2020-7177

A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7177

A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7177

CVE-2020-7177 affects HPE Intelligent Management Center (iMC) prior to 7.3 (E0705P07). The issue is a wmiconfigContent expression language injection in the wmiConfigContent.xhtml endpoint, where handling of the beanName parameter allows remote code execution. ZDI notes exploitation requires authe...