HPE.Intelligent.Management.Center.FileTrans.File.Write

Description

This indicates an attack attempt to exploit an Arbitrary File Write vulnerability in HPE Intelligent Management Center.
The vulnerability is due to insufficient validation of request parameters when processing DBMan requests. It may allow remote attackers to write arbitrary file to system via a crafted HTTP request, which could lead to arbitrary code execution with application privileges.

Affected Products

HP Intelligent Management Center prior to 7.3 E0504P04

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us

References