RULE(RULE ID:321794)

Rule General Information
Release Date: 2019-06-10
Rule Name: HPE Intelligent Management Center perfAccessMgrServlet Insecure Deserialization Vulnerability (CVE-2017-8962)
Severity:
CVE ID:
Rule Protection Details
Description: A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
Impact: A remote authenticated user can execute arbitrary code on the target system.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityTrackerID:1039684
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03787en_us