CVE-2017-5794

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06

Description A Remote Arbitrary File Download issue was discovered, potentially allowing unauthorized access to files. This issue may be related to a Directory Traversal Remote Code Execution vulnerability in the FileUploadServlet.

Recommendations For HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06, consider restricting access to the FileUploadServlet until a patch is available. As a temporary workaround, disabling the FileUploadServlet may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.