Lucene search

HpeCVE-2018-7092

HistoryAug 06, 2018 - 8:29 p.m.

CVE-2018-7092

2018-08-0620:29:02

CWE-22

hpe

web.nvd.nist.gov

cve-2018-7092

security

vulnerability

hpe

imc plat

remote exploitation

directory traversal

arbitrary file deletion

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.02

Percentile

89.1%

JSON

A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion.

Affected configurations

Nvd

Node

hpintelligent_management_centerMatch7.3e0506p09

VendorProductVersionCPE
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0506p09:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0506p09::::::

CNA Affected

[
  {
    "product": "HPE Intelligent Management Center Platform (IMC Plat)",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "IMC PLAT 7.3 E0506P09"
      }
    ]
  }
]

References

www.securitytracker.com/id/1041412

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03872en_us

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.02

Percentile

89.1%

JSON

Related for CVE-2018-7092