RULE(RULE ID:321850)

Rule General Information
Release Date: 2019-06-14
Rule Name: HPE Moonshot Provisioning Manager Appliance khuploadfile.cgi Directory Traversal Vulnerability (CVE-2017-8976)
Severity:
CVE ID:
Rule Protection Details
Description: A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityFocusBID:102410
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03803en_us