HP SiteScope Monitors Information Disclosure and Security Bypass Vulnerabilities

Bugtraq ID:	99331
Class:	Unknown
CVE:	CVE-2017-8949 CVE-2017-8950 CVE-2017-8951
Remote:	No
Local:	Yes
Published:	Jun 27 2017 12:00AM
Updated:	Jun 27 2017 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	HP SiteScope Monitors 11.30 HP SiteScope Monitors 11.20
Not Vulnerable:

HP SiteScope Monitors Information Disclosure and Security Bypass Vulnerabilities

HP SiteScope Monitors is prone to multiple local information-disclosure vulnerabilities and a local security-bypass vulnerability

Successful attacks can allow an attacker to obtain sensitive information or bypass certain security restrictions.

HP SiteScope Monitors 11.2x and 11.3x are vulnerable.

HP SiteScope Monitors Information Disclosure and Security Bypass Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP SiteScope Monitors Information Disclosure and Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP SiteScope Monitors Information Disclosure and Security Bypass Vulnerabilities

References:

• HP HomePage (HP)
  
• HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass (HP)