CVE-2017-8978 : A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.

Published 2018-02-15 22:29:09

Updated 2018-03-15 13:52:54

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2017-8978

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 16 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-8978

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:N/AC:M/Au:S/C:P/I:P/A:N	6.8	4.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None
4.6	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N	2.1	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

References for CVE-2017-8978

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us

HPESBMU03806 rev.1 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation
Vendor Advisory

Products affected by CVE-2017-8978

HP » Icewall Sso » Version: 10.0 Update P8 DFW Edition
cpe:2.3:a:hp:icewall_sso:10.0:p8:*:*:dfw:*:*:*
Matching versions
HP » Icewall Sso » Version: 11.0
cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:*
Matching versions
HP » Icewall Mcrp » Version: 4.0
cpe:2.3:a:hp:icewall_mcrp:4.0:*:*:*:*:*:*:*
Matching versions
HP » Icewall Mfa » Version: 4.0 Enterprise Edition
cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:enterprise:*:*:*
Matching versions
HP » Icewall Mfa » Version: 4.0 Standard Edition
cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:standard:*:*:*
Matching versions