CVE-2017-5791

CRITICAL 9.8CVE-2017-5791 · Published 11/10/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
intelligent management center plat hp	`= 7.2`	No fix yet

Description

The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.

References

securityfocus.com/bid/101224 · Third Party Advisory
securityfocus.com/bid/96815 · Third Party Advisory
securitytracker.com/id/1037983 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-17-161 · Third Party Advisory
h20564.www2.hpe.com/hpsc/doc/public/display · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free