PT-2018-17584 · Hewlett Packard · Hpe Network Automation+1
CVE-2018-6493
·
Publicado
2018-05-22
·
Atualizado
2023-03-03
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HP Network Operations Management Ultimate versions 2017.07 through 2018.02
HP Network Automation versions 10.00 through 10.50
Description
The issue allows for remote SQL injection, which could be exploited to gain unauthorized access.
Recommendations
For HP Network Operations Management Ultimate versions 2017.07 through 2018.02, update to a version that includes a fix for this issue.
For HP Network Automation versions 10.00 through 10.50, update to a version that includes a fix for this issue.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hpe Network Automation
Hp Network Operations Management Ultimate