CVE-2017-14349

CRITICAL

HPE SiteScope 11.2x and 11.3x - Improper Privilege Management

Title source: llm

Description

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

References (3)

Core 3

Core References

Various Sources third-party-advisory x_refsource_auscert

https://www.auscert.org.au/bulletins/52758

Vendor Advisory x_refsource_confirm

https://softwaresupport.hpe.com/km/KM02948051

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100989

Scores

CVSS v3 9.8

EPSS 0.0076

EPSS Percentile 73.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-269

Status published

Products (11)

hp/sitescope 11.20

hp/sitescope 11.21

hp/sitescope 11.22

hp/sitescope 11.23

hp/sitescope 11.24

hp/sitescope 11.24.391

hp/sitescope 11.30

hp/sitescope 11.30.521

hp/sitescope 11.31

hp/sitescope 11.32

... and 1 more

Published Sep 30, 2017

Tracked Since Feb 18, 2026