CVE-2019-11946
Hewlett Packard Enterprise Intelligent Management Center Standard ImcLoginMgrImpl Hard-coded Cryptographic Key Credentials Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Se ha identificado una vulnerabilidad revelación de credenciales remota en HPE Intelligent Management Center (IMC) PLAT en versiones anteriores a 7.3 E0506P09.
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the ImcLoginMgrImpl class. The class contains hard-coded secrets in clear text. An attacker can leverage this in conjunction with other vulnerabilities to decrypt user passwords.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-05-09 CVE Published
- 2019-05-13 CVE Reserved
- 2024-03-25 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-798: Use of Hard-coded Credentials
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | < 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version " < 7.3" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0503 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0504 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0504p02 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0504p04 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0506 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0506p03 |
Affected
| ||||||
| Hp Search vendor "Hp" | Intelligent Management Center Search vendor "Hp" for product "Intelligent Management Center" | 7.3 Search vendor "Hp" for product "Intelligent Management Center" and version "7.3" | e0506p07 |
Affected
| ||||||