HPESBGN04530 rev.2 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to 6.60.05, 7.00.00, 7.10.00, 7.20.00, 8.00.00, 8.10.00, 8.20.00, 8.30.00, 8.40.00,...

PT-2023-23038 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: A remote authentication bypass issue exists in the HPE OneView API. This issue could be remotely exploited to allow authentication bypass, disclosure of sensitive information, and denia...

CVE-2023-28084

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...

Authentication flaw

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...

CVE-2023-28089

An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules...

CVE-2023-28086

An HPE OneView appliance dump may expose proxy credential settings...

CVE-2023-28087

An HPE OneView appliance dump may expose OneView user accounts...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-28089

An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules...

CVE-2023-28086

An HPE OneView appliance dump may expose proxy credential settings...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-28090

An HPE OneView appliance dump may expose SNMPv3 read credentials...

Code injection

An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules...

Code injection

An HPE OneView appliance dump may expose OneView user accounts...

Command injection

An HPE OneView appliance dump may expose SAN switch administrative credentials...

Default credentials

An HPE OneView appliance dump may expose SNMPv3 read credentials...

Code injection

An HPE OneView appliance dump may expose proxy credential settings...

CVE-2023-28084 HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...

CVE-2023-28084 HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...

CVE-2023-28090

CVE-2023-28090 affects HPE OneView appliances where a device dump could expose SNMPv3 read credentials. From CNNVD and Red Hat/NVD records, the issue exists in OneView prior to version 8.2, with a confidentiality impact (C)High and local attack vector. The connected documents do not provide a con...