Lucene search

K
nvd[email protected]NVD:CVE-2022-37935
HistoryMar 01, 2023 - 8:15 a.m.

CVE-2022-37935

2023-03-0108:15:10
web.nvd.nist.gov
4
cve-2022-37935
hpe oneview
vmware vcenter
disclosure
username
password

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0

Percentile

13.3%

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.

Affected configurations

Nvd
Node
hponeview_for_vmware_vcenterRange10.010.4
OR
hponeview_for_vmware_vcenterRange11.011.2
OR
hponeview_for_vmware_vcenterMatch9.6
VendorProductVersionCPE
hponeview_for_vmware_vcenter*cpe:2.3:a:hp:oneview_for_vmware_vcenter:*:*:*:*:*:*:*:*
hponeview_for_vmware_vcenter9.6cpe:2.3:a:hp:oneview_for_vmware_vcenter:9.6:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

0

Percentile

13.3%

Related for NVD:CVE-2022-37935