CVE-2017-12503: Input Validation
Published Feb 15, 2018
·Updated
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.
Affected Software
1 affected component
HP Intelligent Management Center=7.3-e0504
Event History
Feb 15, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
Which deployments are affected and which versions contain the fix?
The affected release is HPE Intelligent Management Center PLAT 7.3 (E0504). The issue is resolved in PLAT 7.3 (E0506) and subsequent versions.
2
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, has low attack complexity, requires low privileges, and does not require user interaction. Successful exploitation can affect confidentiality, integrity, and availability.