CVE-2017-8982: Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Authentication Bypass Vulnerability
A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.
Other sources
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center Smart Connect with Wireless Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UrlAccessController servlet. The issue results from the lack of proper filtering of URLs. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8982?
CVE-2017-8982 is classified as a high severity vulnerability due to its ability to allow privilege escalation.
How do I fix CVE-2017-8982?
To fix CVE-2017-8982, you should upgrade to a patched version of HPE Intelligent Management Center, specifically version 7.3 E0504P5 or later.
What product is affected by CVE-2017-8982?
CVE-2017-8982 affects HPE Intelligent Management Center version 7.3 E0504P4.
Can CVE-2017-8982 be exploited remotely?
Yes, CVE-2017-8982 can be exploited remotely, allowing attackers to bypass authentication restrictions.
What are the potential consequences of exploiting CVE-2017-8982?
Exploiting CVE-2017-8982 could lead to unauthorized access and privilege escalation on affected systems.