Medium severity · published Feb 15, 2018
CVE-2017-8949
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVSS
0.6%
EPSS
No
On KEV
Description
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Sitescope · HP
11.20; 11.21; 11.22; 11.23; 11.24; 11.24.391; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-8949
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-8949
Third Party Advisory
http://www.securityfocus.com/bid/99331
Third Party Advisory
http://www.securitytracker.com/id/1038791
Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03763en_us
More from Sitescope
9.8
CVE-2017-14349
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing…
7.8
CVE-2017-8951
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
7.5
CVE-2015-2802
An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset…
7.5
CVE-2017-8952
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVE-2017-8950
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found