PT-2020-15777
CVE-2020-24626
·
تاريخ النشر
2020-09-08
·
تاريخ التحديث
2020-09-29
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9
Description
The issue concerns an unauthenticated directory traversal vulnerability in the ReceiverServlet class, specifically in the doPost() method. This can lead to arbitrary remote code execution.
Recommendations
For HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9, consider restricting access to the ReceiverServlet class until a patch is available. As a temporary workaround, disabling the doPost() method in the ReceiverServlet class may help mitigate the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾