CVEvulnerability
CVE-2017-13984
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
- Weaknesses
- CWE-287
Description
An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal.
Affected configurations
• hp bsm platform application performance management system health 9.26
• hp bsm platform application performance management system health 9.30
• hp bsm platform application performance management system health 9.40
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.zerodayinitiative.com/advisories/ZDI-17-720/ www.zerodayinitiative.com
- https://softwaresupport.hpe.com/km/KM02942065 softwaresupport.hpe.com
- https://www.auscert.org.au/bulletins/52154 www.auscert.org.au
- http://www.zerodayinitiative.com/advisories/ZDI-17-720/ www.zerodayinitiative.com
- https://softwaresupport.hpe.com/km/KM02942065 softwaresupport.hpe.com
- https://www.auscert.org.au/bulletins/52154 www.auscert.org.au