This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ImcLoginMgrImpl class. The class contains hard-coded secrets in clear text. An attacker can leverage this in conjunction with other vulnerabilities to decrypt user passwords.