CVE-2019-5357 File upload in HPE Intelligent Management Center (IMC) PLAT

High 8.8 Published Updated

Remote attackers can execute arbitrary code on HPE Intelligent Management Center PLAT via a file upload vulnerability.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2019-5357?

CVE-2019-5357 is a high-severity vulnerability in Hp Intelligent Management Center, published on 5 Jun 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

Weakness: CWE-434

Which versions are affected by CVE-2019-5357?

It affects 1 product.

Products include Hp Intelligent Management Center.

How do I fix CVE-2019-5357?

No fix has been published for CVE-2019-5357 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-5357 being exploited?

There is no known exploitation of CVE-2019-5357 in the wild and no public exploit code.

All Hp Intelligent Management Center vulnerabilities

Sources

Also known as GHSA-x42c-77f9-6fgh.

Is CVE-2019-5357 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free