exploitDog

CVE-2017-5809

Опубликовано: 15 фев. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

Ссылки

http://www.securityfocus.com/bid/100088
Third Party Advisory
VDB Entry
https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us
Vendor Advisory
http://www.securityfocus.com/bid/100088
Third Party Advisory
VDB Entry
https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:data_protector:*:*:*:*:*:*:*:*

Версия до 8.17 (исключая)

cpe:2.3:a:hp:data_protector:9.09:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00658

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-275

Связанные уязвимости

GHSA-3p6v-qx4g-mwhp

CVSS3: 5.5

github

больше 3 лет назад

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

EPSS

Процентиль: 71%

0.00658

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-275