CVE:CVE-2017-8978
CNNVD:CNNVD-201705-787
HPE IceWall SSO Dfw等都是美国惠普企业（Hewlett Packard Enterprise，HPE）公司的产品。HPE IceWall SSO Dfw是一套单点登录软件。IceWall MCRP是一款反向代理软件。
多款HPE产品中存在信息泄露漏洞。远程攻击者可利用该漏洞获取信息或执行更改操作。以下产品和版本受到影响：HPE IceWall SSO Dfw 10.0 Patch 8 (HP-UX and RHEL)和11.0 (RHEL)版本，IceWall MCRP 4.0版本；IceWall MFA 4.0 Enterprise Edition MFA Proxy；IceWall MFA 4.0 Standard Edition MFA Proxy。
solution:Upgrade hp icewall_mcrp to a higher version than 4.0,and avoid the version 4.0; Upgrade hp icewall_mfa to a higher version than 4.0,and avoid the version 4.0; Upgrade hp icewall_sso to a higher version than 10.0:p8,11.0,and avoid the version 10.0:p8,11.0