Critical severity · published Sep 30, 2017
CVE-2017-14349
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing…
9.8
CVSS
2.6%
EPSS
No
On KEV
Description
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Sitescope · HP
11.20; 11.21; 11.22; 11.23; 11.24; 11.24.391; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-14349
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-14349
www.securityfocus.com
http://www.securityfocus.com/bid/100989
softwaresupport.hpe.com
https://softwaresupport.hpe.com/km/KM02948051
www.auscert.org.au
https://www.auscert.org.au/bulletins/52758
More from Sitescope
7.8
CVE-2017-8951
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
7.5
CVE-2015-2802
An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset…
7.5
CVE-2017-8952
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVE-2017-8950
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVE-2017-8949
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found