CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

PT-2021-16415

Name of the Vulnerable Software and Affected Versions: HPE Moonshot Provisioning Manager version 1.20 Description: A potential security issue has been identified that could be remotely exploited by an unauthenticated user to cause a stack-based buffer overflow using user-supplied input to the...

HPE Moonshot Provisioning Manager Path Traversal Vulnerability

A path traversal vulnerability in HPE Moonshot Provisioning Manager prior to v1.20, which stems from incorrectly handling user input that results in traversing a directory triggering khuploadfile.cgi, can be exploited by an attacker to cause remote code execution, denial of service, and/or...

PT-2021-16416

Name of the Vulnerable Software and Affected Versions: HPE Moonshot Provisioning Manager version 1.20 Description: A potential security issue has been identified in the HPE Moonshot Provisioning Manager. This application is used to setup and configure an HPE Moonshot 1500 chassis in a VMWare or...

CVE-2021-25140: Improper Limitation of a Pathname to a Restricted Directory

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139: Out-of-bounds Write

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

(0Day) Hewlett Packard Enterprise Moonshot Provisioning Manager khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi binary. The issue results...

HPESBHF04085 rev.1 - HPE Moonshot Provisioning Manager, Remote Directory Traversal in khuploadfile.cgi

Potential Security Impact: Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager Version: 1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25140 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

The vulnerability in the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager Appliance allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and execute arbitrary code with root privileges...

Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi file. The issue results...

Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi file. The issue results...

PT-2018-1082

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 Description A Remote Code Execution issue exists due to insufficient input validation in the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager...

PT-2018-1081

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 Description A Remote Code Execution issue exists due to insufficient input validation in the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager...