HPE Edgeline Infrastructure Manager Authentication Bypass

The HPE Edgeline Infrastructure Manager running on the remote host Manager is affected by an authentication bypass vulnerability due to improper access control to private URLs. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP message, to reset the Administrator and root passwords. The attacker can then SSH to remote host as root.