CVE-2017-5803 - Vulnerability Details - OpenCVE

ReportizFlow

A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:C/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hp	Nonstop Server Nonstop Server Software

Configuration 1 [-]

AND

OR	cpe:2.3:a:hp:nonstop_server_software::::::::
	cpe:2.3:a:hp:nonstop_server_software::::::::

cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.securityfocus.com/bid/98052
http://www.securitytracker.com/id/1038370
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us

History

No history.

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2018-02-15T22:00:00Z

Updated: 2024-09-17T01:50:56.193Z

Reserved: 2017-02-01T00:00:00

Link: CVE-2017-5803

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-02-15T22:29:06.277

Modified: 2024-11-21T03:28:24.740

Link: CVE-2017-5803

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "NonStop Servers using SSH Service", "vendor": "Hewlett Packard Enterprise", "versions": [{"status": "affected", "version": "L series: T0801L02 through T0801L02^ABX"}, {"status": "affected", "version": "J and H series: T0801H01 through T0801H01^ACA"}]}], "datePublic": "2017-04-27T00:00:00", "descriptions": [{"lang": "en", "value": "A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found."}], "problemTypes": [{"descriptions": [{"description": "Remote Disclosure of Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-11-19T14:06:55", "orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us"}, {"name": "98052", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/98052"}, {"name": "1038370", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1038370"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2017-04-27T00:00:00", "ID": "CVE-2017-5803", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "NonStop Servers using SSH Service", "version": {"version_data": [{"version_value": "L series: T0801L02 through T0801L02^ABX"}, {"version_value": "J and H series: T0801H01 through T0801H01^ACA"}]}}]}, "vendor_name": "Hewlett Packard Enterprise"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Disclosure of Information"}]}]}, "references": {"reference_data": [{"name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us"}, {"name": "98052", "refsource": "BID", "url": "http://www.securityfocus.com/bid/98052"}, {"name": "1038370", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038370"}, {"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T15:11:48.705Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us"}, {"name": "98052", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/98052"}, {"name": "1038370", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1038370"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us"}]}]}, "cveMetadata": {"assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "assignerShortName": "hpe", "cveId": "CVE-2017-5803", "datePublished": "2018-02-15T22:00:00Z", "dateReserved": "2017-02-01T00:00:00", "dateUpdated": "2024-09-17T01:50:56.193Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AEBC02A-0B3A-444D-BE7A-A3ECDACB0747", "versionEndIncluding": "t0801h01\\^aca", "versionStartIncluding": "t0801h01", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF7227BC-AC62-490B-AF3D-CD0037105D25", "versionEndIncluding": "t0801l02\\^abx", "versionStartIncluding": "t0801l02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*", "matchCriteriaId": "17C2C32B-5ABC-4679-9A99-F17829E36182", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad de revelaci\u00f3n remota de informaci\u00f3n en HPE NonStop Servers que emplean SSH Service version L series: T0801L02 hasta T0801L02^ABX; J y H series: T0801H01 hasta T0801H01^ACA."}], "id": "CVE-2017-5803", "lastModified": "2024-11-21T03:28:24.740", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2018-02-15T22:29:06.277", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98052"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1038370"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us"}, {"source": "[email protected]", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98052"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1038370"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "[email protected]", "type": "Primary"}]}