CVE-2017-5791 The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.
CriticalCVSS 9.8
EPSS 68.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc intelligent management center plat | = 7.2-e0403p06 | No fix listed |
References
- 101224 third-party-advisory vdb-entry
- 96815 third-party-advisory vdb-entry
- 1037983 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- h20564.www2.hpe.com vendor-advisory