« Volver al listado

CVE-2017-8978

Estado: ModificadaMedia (4.6)—

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

HP — Icewall McrpHP — Icewall MFAHP — Icewall SSO

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-8978",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 4.6,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "Hewlett Packard Enterprise",
          "product": "IceWall Products",
          "versions": [
            {
              "status": "affected",
              "version": "MFA 4.0 Proxy"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-15T22:29:09.247",
  "references": [
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    },
    {
      "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found."
    },
    {
      "lang": "es",
      "value": "SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01 y S4FND 1.02, no valida suficientemente y/o codifica los campos ocultos, lo que resulta en una vulnerabilidad de Cross-Site Scripting (XSS)."
    }
  ],
  "lastModified": "2026-06-17T01:27:18.273",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:icewall_mcrp:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3797D08F-16ED-49E0-9CF1-7A73035D7AFC"
            },
            {
              "criteria": "cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0444520D-5D40-4637-B200-8413DE664DD0"
            },
            {
              "criteria": "cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:standard:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AC7D65E-80B4-4031-9E76-FDC2302A505F"
            },
            {
              "criteria": "cpe:2.3:a:hp:icewall_sso:10.0:p8:*:*:dfw:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04C02CA4-A7C0-4D20-9CA9-E71F0B7F1535"
            },
            {
              "criteria": "cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBA1E625-903D-49CC-B03E-C06B4699C8B0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}