CVE-2017-8982

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	Intelligent Management Center (iMC) PLAT	7.3 E0504P4

References

http://www.securitytracker.com/id/1040283Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03809en_usVendor Advisory
https://www.exploit-db.com/exploits/44648/Exploit, Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-139/Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040283Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03809en_usVendor Advisory
https://www.exploit-db.com/exploits/44648/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-89838.8A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.CVE-2017-89848.8A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found.CVE-2017-89855.3HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM CVE-2017-89878.6A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulne CVE-2017-89889.8A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00 CVE-2017-89899.1A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirecti CVE-2017-89909.8A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earl CVE-2017-89915.4HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This iss CVE-2017-89929.8HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This is CVE-2017-89935.4A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.CVE-2017-89949.8A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remot CVE-2017-90009.8ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.