CVE-2017-8976

The CVE concerns Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance prior to 1.22. A vulnerability in khuploadfile.cgi arises from improper validation of user-supplied data, enabling an unauthenticated, remote attacker to upload files and execute arbitrary code (remote code execut...

CVE-2017-8975

CVE-2017-8975 describes a remote code execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance. The public details reference the affected product version v1.20 and identify the exploit surface as the khuploadfile.cgi handler, where improper validation allows u...

CVE-2017-8977

CVE-2017-8977 affects Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance v1.20. Multiple connected sources describe a remote directory traversal flaw in the Moonshot Provisioning Manager, caused by missing input validation in the server_response.py script. This leads to arbitrary ...