HP Intelligent Management Center Service Operation Management Arbitrary File Download Vulnerability

Bugtraq ID:	101282
Class:	Input Validation Error
CVE:	CVE-2017-12555
Remote:	Yes
Local:	No
Published:	Oct 03 2017 12:00AM
Updated:	Oct 03 2017 12:00AM
Credit:	Tenable Inc.
Vulnerable:	HP Intelligent Management Center (iMC) IMC SOM 7.3 E0501
Not Vulnerable:	HP Intelligent Management Center (iMC) IMC SOM 7.3 E0501P01

HP Intelligent Management Center Service Operation Management Arbitrary File Download Vulnerability

HP Intelligent Management Center Service Operation Management is prone to a vulnerability that lets attackers download arbitrary files.

An attacker can exploit this issue to download arbitrary files. Information obtained may aid in further attacks.

HP Intelligent Management Center (iMC) IMC SOM 7.3 E0501 is vulnerable; other versions may also be affected.

HP Intelligent Management Center Service Operation Management Arbitrary File Download Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Intelligent Management Center Service Operation Management Arbitrary File Download Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Intelligent Management Center Service Operation Management Arbitrary File Download Vulnerability

References:

• HP Homepage (HP)
  
• HPESBHF03776 rev.1 - HPE Intelligent Management Center (iMC) Service Operation (HP)