CVE-2017-13985

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
microfocusCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
hpbsm_platform_application_performance_management_system_health
9.26
hpbsm_platform_application_performance_management_system_health
9.30
hpbsm_platform_application_performance_management_system_health
9.40
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://zerodayinitiative.com/advisories/ZDI-17-721/
https://softwaresupport.hpe.com/km/KM02942065
https://www.auscert.org.au/bulletins/52154
http://zerodayinitiative.com/advisories/ZDI-17-721/
https://softwaresupport.hpe.com/km/KM02942065
https://www.auscert.org.au/bulletins/52154