CVE-2014-7878

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
28.8%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: November 14, 2014 (4200 days ago)
Last Modified: May 6, 2026
Vendor: HPE
Source: NVD

Description

The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived from the Seed Node image, uses the same security keys across different customers' installations, which allows remote attackers to execute arbitrary code by leveraging these keys for a connection.

CWE

CWE-310

Affected Products

hp helion cloud development platform

References

🔗 exchange.xforce.ibmcloud.com 🔗 h20564.www2.hp.com 🔗 exchange.xforce.ibmcloud.com 🔗 h20564.www2.hp.com