A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Link | Tags |
---|---|
https://www.tenable.com/security/research/tra-2017-05 | third party advisory |
http://www.securitytracker.com/id/1037552 | vdb entry third party advisory |
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05361944 | vendor advisory |
http://www.securityfocus.com/bid/95225 | vdb entry third party advisory |