high7.8Public exploit code
CVE-2017-14355
A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Connected Backup 8.6/8.8.6 - Local Privilege Escalation2018-01-23 · local · windows · Verified
Impact
A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to allow escalation of privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Connected Backup | Versions 8.6, 8.8.6 |
References
- NVD record
- CVE.org record
- http://seclists.org/bugtraq/2017/Oct/23
- http://www.securityfocus.com/bid/101270
- https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868
- https://www.exploit-db.com/exploits/43857/
- http://seclists.org/bugtraq/2017/Oct/23
- http://www.securityfocus.com/bid/101270
- https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868
- https://www.exploit-db.com/exploits/43857/