PT-2019-17596

CVE-2019-5356

·

Publicado

2019-03-04

·

Atualizado

2019-06-06

Descrição por

CVSS 3.1
10
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (IMC) PLAT versions prior to 7.3 E0506P09
Description A remote code execution issue was identified. This allows for potential exploitation, although specific details about the number of affected devices or real-world incidents are not provided. The issue involves directory traversal and remote code execution in the CommonUtils unzip component.
Recommendations For versions prior to 7.3 E0506P09, update to version 7.3 E0506P09 or later to resolve the issue. As a temporary workaround, consider restricting access to the CommonUtils unzip component to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
ZDI-19-250
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾