Remote Session Reuse Vulnerability in HPE 3PAR Service Processor
CVE-2019-5400

6.3MEDIUM

Key Information:

Vendor
HP
Status
HP 3par Service Processor
Vendor
CVE Published:
9 August 2019

Summary

A vulnerability has been identified in HPE 3PAR Service Processor that allows unauthorized reuse of remote sessions. This issue affects versions prior to 5.0.5.1 and could potentially allow attackers to gain access to sensitive system functions by hijacking active sessions.

Affected Version(s)

HPE 3PAR Service Processor prior to 5.0.5.1

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.