CVE-2017-14105

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-09-01 · updated 2026-06-17
Weakness: CWE-20

Description

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface).

Affected products

Aerohive Hivemanager Classic: 8.0r1, 8.1r1

References

https://github.com/theguly/CVE-2017-14105
https://github.com/theguly/CVE-2017-14105

Get alerted when CVE-2017-14105 or the next vulnerability affects your stack