Credential Disclosure Vulnerability in HPE OneView for VMware vCenter
CVE-2022-37935

5.5MEDIUM

Key Information:

Vendor
HP
Status
HP Oneview For Vmware Vcenter,
Vendor
CVE Published:
18 February 2023

Summary

HPE OneView for VMware vCenter has a vulnerability that may allow an unauthorized user to access sensitive information, including the HPE OneView username and password. This exposure can lead to unauthorized access and manipulation of resources if the credentials are intercepted or disclosed. It is critical for organizations using this product to implement security measures to protect against potential exploitation.

Affected Version(s)

HPE OneView for VMware vCenter, 9.6 <= 11.2

References

https://support.hpe.com/hpesc/public/docDisplay?docLocale...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.