CVE-2017-14349

Critical

Published: 30/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

Risk Assessment

The organization may be exposed to the disclosure of confidential information, potentially leading to privacy and data security breaches.

Recommendation

It is recommended to upgrade to the latest version of HPE SiteScope to mitigate this vulnerability and restrict access to read-only accounts.

Original NVD description (English source)

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.