CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

A vulnerability exists in the cmdb service of the HPE Performance Cluster Manager (HPCM) , specifically affecting versions 1.12 and earlier . Due to a missing authorization issue (CWE-862 ), an attacker could gain unauthorized access to an arbitrary file on the server host. The potential security...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

PT-2025-17594 · Hewlett Packard · Hpe Performance Cluster Manager

Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM affected versions not specified Description: A vulnerability in the cmdb service could allow an attacker to gain access to an arbitrary file on the server host. Recommendations: At the moment, there is no...

Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞

Hewlett Packard Enterprise Performance Cluster Manager is a security vulnerability in Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager that stems from a problem with the cmdb service and could result in access to arbitrary files...

CVE-2025-37087: Missing Authorization

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI allows an attacker to bypass authentication . This issue affects versions through 1.12 (or prior to 1.13). To mitigate this risk, users are recommended to update to a version that contains a fix for the authentication bypass.

Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞

A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager, a Hewlett Packard Enterprise company. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager versions prior to 1.13 that originates from a possible bypass of authenticatio...

CVE-2025-27086: Improper Authentication

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

PT-2025-17459 · Hewlett Packard · Hpe Performance Cluster Manager

Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM versions through 1.12 Description: A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication. This issue affects the HPE Performance Cluster Manager...

HPESBCR04840 rev.1 - HPE Performance Cluster Manager (HPCM), Unauthorized Access

Potential Security Impact: Remote: Arbitrary File Deletion, Arbitrary File Download, Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Cluster Manager HPCM 1.12 and earlier -...

HPESBCR04842 rev.1 - HPE Performance Cluster Manager (HPCM), Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Cluster Manager HPCM 1.12 and earlier - https://support.hpe.com/hpesc/docDisplay?docId=a00146086enus&docLocale=enUS CVSS Scores: | CVE | CVSS Vector | Base Scor...

Privilege Escalation

open-cluster-management.io/ocm is vulnerable to Privilege Escalation. The vulnerability is due to improper service account management, where the cluster-manager service account is bound to a ClusterRole with broad permissions, including the ability to create Pod resources. It allows attackers on...

SUSE CVE-2024-9779

A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...

Open Cluster Management vulnerable to Trust Boundary Violation

A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...