CVE-2018-7108

2018-09-2718:00:00

hpe

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.

CNA Affected

[
  {
    "product": "HPE StorageWorks XP7 Automation Director (AutoDir)",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "version 8.5.2-02 to earlier than 8.6.1-00"
      }
    ]
  }
]