A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Weakness
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intelligent_management_center | Hp | * | 7.3 (excluding) |
| Intelligent_management_center | Hp | 7.3 (including) | 7.3 (including) |
| Intelligent_management_center | Hp | 7.3-e0501 (including) | 7.3-e0501 (including) |
| Intelligent_management_center | Hp | 7.3-e0503 (including) | 7.3-e0503 (including) |
| Intelligent_management_center | Hp | 7.3-e0503p02 (including) | 7.3-e0503p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0504 (including) | 7.3-e0504 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p02 (including) | 7.3-e0504p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p04 (including) | 7.3-e0504p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p2 (including) | 7.3-e0504p2 (including) |
| Intelligent_management_center | Hp | 7.3-e0504p4 (including) | 7.3-e0504p4 (including) |
| Intelligent_management_center | Hp | 7.3-e0506 (including) | 7.3-e0506 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p02 (including) | 7.3-e0506p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p03 (including) | 7.3-e0506p03 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p07 (including) | 7.3-e0506p07 (including) |
| Intelligent_management_center | Hp | 7.3-e0506p09 (including) | 7.3-e0506p09 (including) |
| Intelligent_management_center | Hp | 7.3-e0605 (including) | 7.3-e0605 (including) |
| Intelligent_management_center | Hp | 7.3-e0605h02 (including) | 7.3-e0605h02 (including) |
| Intelligent_management_center | Hp | 7.3-e0605h05 (including) | 7.3-e0605h05 (including) |
| Intelligent_management_center | Hp | 7.3-e0605p04 (including) | 7.3-e0605p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0605p06 (including) | 7.3-e0605p06 (including) |
| Intelligent_management_center | Hp | 7.3-e0705 (including) | 7.3-e0705 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p02 (including) | 7.3-e0705p02 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p04 (including) | 7.3-e0705p04 (including) |
| Intelligent_management_center | Hp | 7.3-e0705p06 (including) | 7.3-e0705p06 (including) |
Potential Mitigations
- Make fields transient to protect them from deserialization.
- An attempt to serialize and then deserialize a class containing transient fields will result in NULLs where the transient data should be. This is an excellent way to prevent time, environment-based, or sensitive variables from being carried over and used improperly.
Related Attack Patterns
References
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04036en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbnw04036en_us