Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:MISC:HPE-AUTH-BYPASS |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
HPE iLO 4 1.00-2.50 Administrator Authentication Bypass |
Release Date |
2018/11/01 |
Update Number |
3114 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: HPE iLO 4 1.00-2.50 Administrator Authentication Bypass
This signature detects attempts to exploit a known vulnerability against HPE. Attackers could bypass security restrictions to gain unauthorized access to user accounts
Extended Description
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.
Affected Products
- Hp integrated_lights-out_4_firmware 1.11
- Hp integrated_lights-out_4_firmware 1.13
- Hp integrated_lights-out_4_firmware 1.20
- Hp integrated_lights-out_4_firmware 2.01
- Hp integrated_lights-out_4_firmware 2.03
References
- BugTraq: 100467
- CVE: CVE-2017-12542