Intrusion PreventionHPE.IMC.flexFileUpload.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit an Arbitrary File Upload vulnerability in HPE Intelligent Management Center.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker may be able to exploit this to upload arbitrary files onto specific directories, leading to possible further attacks.
Affected Products
HP Intelligent Management Center prior to 7.3 E0506P03
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Refer to the vendor's advisory for updates:
https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03788en_us
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 44843 |
| Created | Nov 17, 2017 |
| Updated | Dec 11, 2017 |
| Risk |
|
| CVE ID | CVE-2017-8961 |
| Exploit Prediction Score | 84.37% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | HP |