PT-2020-15789

CVE-2020-24648

·

Published

2020-01-29

·

Updated

2020-10-21

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) versions prior to 7.3 (E0705P07)
Description A remote code execution vulnerability was discovered due to the deserialization of untrusted data. This issue affects the AccessMgrServlet classname.
Recommendations For versions prior to 7.3 (E0705P07), update to version 7.3 (E0705P07) or later to resolve the issue. As a temporary workaround, consider restricting access to the AccessMgrServlet classname until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-19-1036
Found an issue in the description? Have something to add? Feel free to write us 👾