{"containers": {"cna": {"affected": [{"product": "NonStop Server", "vendor": "Hewlett Packard Enterprise", "versions": [{"status": "affected", "version": "L-Series: T6533L01 through T6533L01^ADN"}, {"status": "affected", "version": "J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL"}]}], "datePublic": "2017-12-18T00:00:00", "descriptions": [{"lang": "en", "value": "A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found."}], "problemTypes": [{"descriptions": [{"description": "Local Authentication Restriction Bypass", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-02-16T10:57:01", "orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us"}, {"name": "102530", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/102530"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-alert@hpe.com", "DATE_PUBLIC": "2017-12-18T00:00:00", "ID": "CVE-2017-8974", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "NonStop Server", "version": {"version_data": [{"version_value": "L-Series: T6533L01 through T6533L01^ADN"}, {"version_value": "J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL"}]}}]}, "vendor_name": "Hewlett Packard Enterprise"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Local Authentication Restriction Bypass"}]}]}, "references": {"reference_data": [{"name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us"}, {"name": "102530", "refsource": "BID", "url": "http://www.securityfocus.com/bid/102530"}]}}}}, "cveMetadata": {"assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "assignerShortName": "hpe", "cveId": "CVE-2017-8974", "datePublished": "2017-12-18T00:00:00", "dateReserved": "2017-05-15T00:00:00", "dateUpdated": "2018-02-16T10:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB8E3429-4707-4147-B517-2FA1761611DF", "versionEndIncluding": "t6533h04\\^adf", "versionStartIncluding": "t6533h02", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:nonstop_server_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "31E59888-AEC4-442C-BE32-48B71954AA93", "versionEndIncluding": "t6533l01\\^adn", "versionStartIncluding": "t6533l01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hp:nonstop_server:-:*:*:*:*:*:*:*", "matchCriteriaId": "17C2C32B-5ABC-4679-9A99-F17829E36182", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found."}, {"lang": "es", "value": "En la versi\u00f3n 1.0 de SAP HANA Extended Application Services, una contrase\u00f1a keystore plana se escribe en un archivo de registro del sistema, lo que podr\u00eda poner en peligro la confidencialidad de la comunicaci\u00f3n SSL."}], "id": "CVE-2017-8974", "lastModified": "2019-10-03T00:03:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 3.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-02-15T22:29:09.077", "references": [{"source": "security-alert@hpe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/102530"}, {"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03804en_us"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}