CVE-2017-13982
Hewlett Packard Enterprise Application Performance Management System Health UploadManager Servlet Directory Traversal Unrestricted File Upload Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files.
Una vulnerabilidad de salto de directorio en HPE BSM Platform Application Performance Management System Health en versiones 9.26, 9.30 y 9.40 permite que los usuarios suban archivos sin restricción.
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the UploadManager servlet, which listens on TCP port 18080 by default. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-08-30 CVE Reserved
- 2017-09-07 CVE Published
- 2024-08-05 CVE Updated
- 2024-11-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/101199 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-17-719 | X_refsource_misc |
|
| https://softwaresupport.hpe.com/km/KM02942065 | X_refsource_confirm | |
| https://www.auscert.org.au/bulletins/52154 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Bsm Platform Application Performance Management System Health Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" | 9.26 Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" and version "9.26" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Bsm Platform Application Performance Management System Health Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" | 9.30 Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" and version "9.30" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Bsm Platform Application Performance Management System Health Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" | 9.40 Search vendor "Hp" for product "Bsm Platform Application Performance Management System Health" and version "9.40" | - |
Affected
| ||||||