CVE-2021-26579

2021-03-3017:27:11

hpe

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys.

CNA Affected

[
  {
    "product": "HPE Unified Data Management (UDM)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 1.2009.0 and 1.2101.0"
      }
    ]
  }
]