PT-2017-3008
CVE-2017-14349
·
تاريخ النشر
2017-09-21
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HPE SiteScope versions 11.2x through 11.3x
Description
The issue is related to inadequate access control in the HPE SiteScope product, allowing read-only accounts to view all SiteScope interfaces and monitors. This could potentially expose sensitive data. An attacker with remote access and read-only privileges may exploit this to view all interfaces and monitors, disclosing confidential information.
Recommendations
For HPE SiteScope versions 11.2x through 11.3x, consider restricting access to sensitive data and monitors to minimize the risk of exploitation until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾