Remote Script Injection in HPE 3PAR StoreServ Management Software
CVE-2019-5404

8.8HIGH

Key Information:

Vendor
HP
Status
HP 3par Storeserv Management And Core Software Media
Vendor
CVE Published:
9 August 2019

Summary

A remote script injection vulnerability affects the HPE 3PAR StoreServ Management and Core Software Media, enabling attackers to potentially execute malicious scripts remotely. This flaw can compromise the integrity & confidentiality of sensitive data, making it critical for organizations to apply patches from Hewlett Packard Enterprise for versions prior to 3.5.0.1.

Affected Version(s)

HPE 3PAR StoreServ Management and Core Software Media prior to 3.5.0.1

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.