Lucene search

HpeCVE-2023-6573

HistoryJan 23, 2024 - 6:15 p.m.

CVE-2023-6573

2024-01-2318:15:18

hpe

web.nvd.nist.gov

cve-2023-6573

hpe oneview

missing passphrase

restore

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

20.7%

JSON

HPE OneView may have a missing passphrase during restore.

Affected configurations

Nvd

Node

hponeviewRange<8.70

VendorProductVersionCPE
hponeview*cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	oneview	*	cpe:2.3:a:hp:oneview::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HPE OneView",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "lessThan": "8.70",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04586en_us

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

20.7%

JSON

Related for CVE-2023-6573