CVE-2017-14105

CVE-2017-14105 affects Aerohive HiveManager Classic through 8.1r1. A local, authenticated attacker (even Tenant-restricted) can abuse the Backup Archive Handler by modifying a backup archive prior to restore, because pathnames inside the archive are not validated. This allows placing a JSP web sh...