HP Service Pack for ProLiant CVE-2018-7118 Unspecified Local Unauthorized Access Vulnerability

Bugtraq ID:	107845
Class:	Access Validation Error
CVE:	CVE-2018-7118
Remote:	No
Local:	Yes
Published:	Feb 04 2019 12:00AM
Updated:	Feb 04 2019 12:00AM
Credit:	Luna Allan.
Vulnerable:	HP Service Pack for ProLiant 2018.6 HP Service Pack for ProLiant 2012.06.0B
Not Vulnerable:	HP Service Pack for ProLiant 2018.9

HP Service Pack for ProLiant CVE-2018-7118 Unspecified Local Unauthorized Access Vulnerability

HP Service Pack for ProLiant is prone to an unspecified local unauthorized-access vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to data. This may aid in further attacks.

HP Service Pack for ProLiant versions prior to 2018.09.0 are vulnerable.

HP Service Pack for ProLiant CVE-2018-7118 Unspecified Local Unauthorized Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Service Pack for ProLiant CVE-2018-7118 Unspecified Local Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Service Pack for ProLiant CVE-2018-7118 Unspecified Local Unauthorized Access Vulnerability

References:

• Drivers & software Service Pack for ProLiant (HP)
  
• HP HomePage (HP)
  
• HP Service Pack for ProLiant (SPP) Product Page (HP)
  
• HPESBHF03904 rev.1 - HPE Service Pack for ProLiant (SPP) Bundled Software, Local (HP)