HPE Intelligent Management Center TopoDebugServlet Insecure Deserialization

An insecure deserialization vulnerability has been reported in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by the TopoDebugServlet while having vulnerable classes in the code path. A remote, authenticated attacker can exploit this vulnerability...

HPE Intelligent Management Center (IMC) untrustworthy data deserialization vulnerability (CNVD-2019-23766)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. A TopoDebugServlet untrusted data deserialization vulnerability exists in HPE Intelligent Management Center...

PT-2019-17590

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, related to the deserialization of untrusted data. This issue is associated with the TopoDebugServlet...

PT-2019-17589

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, potentially allowing for expression language injection. This could lead to unauthorized code execution on the...

PT-2019-17602

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was found, related to an Expression Language Injection in the TopoDebugServlet. This allows for remote code execution...

(0Day) Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

(0Day) Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

TopoDebugServlet Memory Corruption

The vulnerability of the TopoDebugServlet component in the HPE Intelligent Management Center PLAT software platform is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

PT-2017-3624

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Intelligent Management Center iMC PLAT version 7.3 E0504P2 Description: A Deserialization of Untrusted Data issue was found, which is related to the TopoDebugServlet component. This issue allows an attacker to execu...