← Back

Aerohive

aerohive

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Hivemanager Classic
hivemanager_classic
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14105
1Aerohive
1Hivemanager Classic
May 13, 2026
Sep 1, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local at...Show more
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface).Show less