Local Information Disclosure in HPE Nimble Storage Arrays
CVE-2022-37930

5.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays
Vendor
CVE Published:
12 December 2022

What is CVE-2022-37930?

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that may allow local users to disclose sensitive information. Addressing this issue is crucial to maintain the integrity of data housed within these systems.

Affected Version(s)

HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays Prior to 5.2.1.900 (LTSR), 5.3.0.0 (GA)

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.