Improper Privilege Management in Hewlett Packard Enterprise Nimble Storage Arrays
CVE-2022-37929

5.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays
Vendor
CVE Published:
12 December 2022

What is CVE-2022-37929?

An improperly managed privilege issue was identified in Hewlett Packard Enterprise's Nimble Storage Hybrid Flash Arrays and Secondary Flash Arrays. This vulnerability can lead to unauthorized access and potential manipulation of sensitive configurations, emphasizing the need for immediate attention and remediation to ensure the security of affected systems.

Affected Version(s)

HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays Prior to 5.2.1.900 (LTSR), 5.3.0.0 (GA)

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.