PT-2018-17907

CVE-2018-7102

·

Published

2018-08-31

·

Updated

2018-12-20

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) version PLAT E0506P09
Description A security issue in HPE Intelligent Management Center (iMC) allows remote arbitrary file modification via directory traversal. This can be exploited remotely. The createFabricAutoCfgFile function is involved in this issue.
Recommendations For HPE Intelligent Management Center (iMC) version PLAT E0506P09, consider restricting access to the createFabricAutoCfgFile function until a patch is available to prevent remote arbitrary file modification.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2018-7102
ZDI-18-966
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com