CVE-2016-8523

CVE-2016-8523 describes a remote code execution in HP/ Hewlett Packard Enterprise Smart Storage Administrator (SSA) prior to version 2.60.18.0. The root cause is a flaw in isDirectFileAccess (ipcelmclient.php) that allows an attacker–via a crafted HTTP request–to trigger a proc_open() path, enabl...