CVE-2017-12555 - Vulnerability Details - OpenCVE

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hp	Intelligent Management Center

Configuration 1 [-]

cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.securitytracker.com/id/1039496
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us
https://www.tenable.com/security/research/tra-2017-27

History

No history.

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2018-02-15T22:00:00Z

Updated: 2024-09-17T02:41:41.914Z

Reserved: 2017-08-05T00:00:00

Link: CVE-2017-12555

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-02-15T22:29:04.920

Modified: 2024-11-21T03:09:44.850

Link: CVE-2017-12555

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Intelligent Management Center (iMC) Service Operation Management (SOM)", "vendor": "Hewlett Packard Enterprise", "versions": [{"status": "affected", "version": "IMC SOM 7.3 E0501"}]}], "datePublic": "2017-10-03T00:00:00", "descriptions": [{"lang": "en", "value": "A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found."}], "problemTypes": [{"descriptions": [{"description": "Remote Arbitrary File Download and disclosure of information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-02-16T15:57:01", "orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us"}, {"name": "1039496", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1039496"}, {"tags": ["x_refsource_MISC"], "url": "https://www.tenable.com/security/research/tra-2017-27"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-alert@hpe.com", "DATE_PUBLIC": "2017-10-03T00:00:00", "ID": "CVE-2017-12555", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intelligent Management Center (iMC) Service Operation Management (SOM)", "version": {"version_data": [{"version_value": "IMC SOM 7.3 E0501"}]}}]}, "vendor_name": "Hewlett Packard Enterprise"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Arbitrary File Download and disclosure of information"}]}]}, "references": {"reference_data": [{"name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us"}, {"name": "1039496", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039496"}, {"name": "https://www.tenable.com/security/research/tra-2017-27", "refsource": "MISC", "url": "https://www.tenable.com/security/research/tra-2017-27"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:43:55.947Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us"}, {"name": "1039496", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1039496"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.tenable.com/security/research/tra-2017-27"}]}]}, "cveMetadata": {"assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "assignerShortName": "hpe", "cveId": "CVE-2017-12555", "datePublished": "2018-02-15T22:00:00Z", "dateReserved": "2017-08-05T00:00:00", "dateUpdated": "2024-09-17T02:41:41.914Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*", "matchCriteriaId": "BF29D20B-13A0-4DFD-B2CA-159DD22C6E76", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad de descarga remota de archivos arbitrarios y de revelaci\u00f3n de informaci\u00f3n en HPE Intelligent Management Center (iMC) Service Operation Management (SOM) en su versi\u00f3n IMC SOM 7.3 E0501."}], "id": "CVE-2017-12555", "lastModified": "2024-11-21T03:09:44.850", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-02-15T22:29:04.920", "references": [{"source": "security-alert@hpe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1039496"}, {"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us"}, {"source": "security-alert@hpe.com", "tags": ["Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2017-27"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1039496"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2017-27"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}