CVE-2017-14105

Published: Sep 1, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface).

Affected (2)

Products: Aerohive: Hivemanager Classic

1 product

Hivemanager Classic

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Aerohive Hivemanager Classic	Version 8.0r1
Aerohive Hivemanager Classic	Version 8.1r1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://github.com/theguly/CVE-2017-14105

Source: cve@mitre.org

ExploitPatchThird Party Advisory

https://github.com/theguly/CVE-2017-14105

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

Timeline

No history available yet.