HPE.IMC.sshConfig.Expression.Language.Injection
Description
This indicates an attack attempt to exploit an Expression Language Injection Vulnerability in HP Intelligent Management Center.
This vulnerability is due to insufficient handling of user-supplied HTTP request parameter provided to the sshConfig.xhtml endpoint. A remote, authenticated attacker can exploit this vulnerability by sending a request to sshConfig.xhtml. Successful exploitation results in the execution of arbitrary code on the target system with privileges of SYSTEM user.
Affected Products
HP Intelligent Management Center prior to 7.3 E0705P04
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.hpe.com/hpesc/public/docDisplay?docId=a00098608en_us
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |