Remote Authorization Bypass in HPE 3PAR StoreServ Management Software
CVE-2019-5402

9.4CRITICAL

Key Information:

Vendor
HP
Status
HP 3par Storeserv Management And Core Software Media
Vendor
CVE Published:
9 August 2019

Summary

A vulnerability has been identified in HPE 3PAR StoreServ Management and Core Software that allows attackers to bypass normal authorization mechanisms remotely. This could potentially enable unauthorized access to sensitive functions or data, impacting system integrity and security. Users of affected versions are strongly advised to update to the latest software version, 3.5.0.1 or later, to mitigate this vulnerability.

Affected Version(s)

HPE 3PAR StoreServ Management and Core Software Media prior to 3.5.0.1

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.4
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.