CVE-2024-51770

HPE AutoPass License Server (APLS) before 9.17 is affected by an XML External Entity (XXE) information disclosure vulnerability. The flaw exists in the web service that listens on TCP port 5814 and can be exploited remotely without authentication to disclose sensitive information. Exploitation de...

CVE-2024-51769

CVE-2024-51769 describes an information-disclosure vulnerability in Hewlett Packard Enterprise AutoPass License Server (APLS) prior to version 9.17. The root cause, per the ZDI advisory, is a lack of proper validation of a user-supplied string used to construct SQL queries within the web service ...

CVE-2024-51769

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51769

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

The CVE-2024-51768 entry concerns Hewlett Packard Enterprise AutoPass License Server (APLS) prior to 9.17, where the hsqldb component is the root cause. Public advisories describe an RCE via the hsqldb service, which listens on TCP port 9001; an attacker with network access can potentially execut...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

Hewlett Packard Enterprise AutoPass License Server (APLS) before version 9.17 contains an authentication bypass in the web service listening on port 5814. The flaw arises from an authorization decision based on a non-canonical URL, enabling remote network attackers to bypass authentication withou...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

HPE AutoPass License Server 安全漏洞

HPE AutoPass License Server is a license management system from HPE America. A security vulnerability exists in HPE AutoPass License Server versions prior to 9.17 that stems from an information disclosure...

The vulnerability of the software for managing software product licenses in HPE AutoPass License Server lies in the lack of protective measures for the SQL query structure, allowing attackers to access confidential information.

The vulnerability of the software for managing HPE AutoPass License Server products is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to access confidential information...

PT-2024-9119 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise AutoPass License Server affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the HPE AutoPass License Server software. This allows a remote attacker to...

PT-2024-9117 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in the HPE AutoPass License Server software, which can lead to information...

PT-2024-9116 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to incorrect restriction of XML links to external objects in the HPE AutoPass License Server software. Exploitation of this issue may allow an...