ID CVE-2018-7073
Summary A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.
References
Vulnerable Configurations
  • cpe:2.3:a:hp:moonshot_provisioning_manager:*:*:*:*:*:*:*:*
    cpe:2.3:a:hp:moonshot_provisioning_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:
CWE CWE-668
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
refmap via4
confirm https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03843en_us
misc https://www.tenable.com/security/research/tra-2018-15
Last major update 03-10-2019 - 00:03
Published 06-08-2018 - 20:29
Last modified 03-10-2019 - 00:03
Back to Top