(0Day) Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

HPE Intelligent Management Center PLAT sshConfig.xhtml Code Execution

The vulnerability of the sshConfig.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the beanName parameter...

PT-2017-3481

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the sshConfig.xhtml component. This allows a remote attacker to execute...