CVE-2017-8976HIGH
Description
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
References
http://www.securityfocus.com/bid/102410
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us
Details
Source: MITRE
Published: 2018-02-15
Updated: 2018-03-09
Type: CWE-20
Risk Information
CVSS v2.0
Base Score: 10
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 10
Severity: HIGH
CVSS v3.0
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Severity: CRITICAL
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:hp:moonshot_provisioning_manager_appliance:1.20:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 106460 | HPE Moonshot Provisioning Manager < 1.22 Multiple Vulnerabilities | Nessus | CGI abuses | critical |