A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1278/ | Third Party Advisory VDB Entry |
| https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1278/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us - Vendor Advisory | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-21-1278/ - Third Party Advisory, VDB Entry |
Information
Published : 2021-11-01 14:15
Updated : 2024-11-21 06:00
NVD link : CVE-2021-29212
Mitre link : CVE-2021-29212
CVE.ORG link : CVE-2021-29212
JSON object : View
Products Affected
hp
- ilo_amplifier_pack
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')