CVE-2017-8973

{"id": "CVE-2017-8973", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2018-02-15T22:29:09.027", "references": [{"url": "http://www.securityfocus.com/bid/101938", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security-alert@hpe.com"}, {"url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us", "tags": ["Vendor Advisory"], "source": "security-alert@hpe.com"}, {"url": "http://www.securityfocus.com/bid/101938", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03795en_us", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found."}, {"lang": "es", "value": "Bajo ciertas circunstancias, un endpoint espec\u00edfico de la API del controlador podr\u00eda ser empleado err\u00f3neamente por usuarios no autenticados para ejecutar instrucciones SQL que env\u00edan informaci\u00f3n sobre la configuraci\u00f3n del sistema en SAP HANA Extended Application Services 1.0."}], "lastModified": "2024-11-21T03:35:06.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:matrix_operating_environment:7.6:lr1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5675FF15-7648-4110-9518-87BABC175D50"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}