CVE-2017-5795

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center version PLAT 7.2 E0403P06

Description A Local Arbitrary File Download issue was discovered, which can lead to directory traversal and information disclosure. This issue affects the FileDownloadServlet, potentially allowing unauthorized access to sensitive files.

Recommendations For HPE Intelligent Management Center version PLAT 7.2 E0403P06, consider restricting access to the FileDownloadServlet until a patch is available. As a temporary workaround, limiting the fileName parameter in the FileDownloadServlet may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.