CVE-2017-5787 Denial of service in Version Control Repository Manager (VCRM)
Remote attackers can cause a denial of service in HPE Version Control Repository Manager, requiring an upgrade to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-5787?
CVE-2017-5787 is a medium-severity denial of service vulnerability in Hewlett Packard Enterprise Version Control Repository Manager (VCRM), published on 15 Feb 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.
Which versions are affected by CVE-2017-5787?
It affects 1 product.
Products include Hp Version Control Repository Manager.
How do I fix CVE-2017-5787?
No fix has been published for CVE-2017-5787 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-5787 being exploited?
There is no known exploitation of CVE-2017-5787 in the wild and no public exploit code.
Other vulnerabilities in Hewlett Packard Enterprise Version Control Repository Manager (VCRM)
- CVE-2016-8515 File upload in Version Control Repository Manager (VCRM)
- CVE-2016-8513 Cross-site request forgery in Version Control Repository Manager (VCRM)
- CVE-2015-5409 Memory corruption in n/a
- CVE-2015-5411 Information disclosure in n/a
- CVE-2016-8514 A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found.
Sources
Also known as GHSA-6f9c-c7c3-c5f9.