5736 matches found
CVE-2020-4352
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427...
Privilege escalation
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427...
CVE-2020-4352
The IBM bulletin confirms CVE-2020-4352 affects IBM MQ for HPE NonStop Server versions 8.0.4 and 8.1.0, enabling privilege escalation when running in restricted mode. Root cause details are not disclosed in the provided documents, but remediation is available: install Fixpack 8.1.0.4 (IT31836) fo...
CVE-2020-4352
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427...
CVE-2020-7138
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerabilit...
CVE-2020-7139
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this...
CVE-2020-7137
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue...
CVE-2020-7137
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue...
CVE-2020-7139
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this...
CVE-2020-7138
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerabilit...
CVE-2020-7137
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue...
Design/Logic Flaw
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this...
Input validation
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue...
Remote code execution
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerabilit...
CVE-2020-7138
CVE-2020-7138 affects HPE Nimble Storage NimbleOS; potential remote code execution could grant elevated privileges on the array. Vulnerable firmware versions include NimbleOS 3.9.3.0, 4.5.6.0, 5.0.9.0, and 5.1.4.100, with fixes and subsequent releases addressing the issue. Affected products: HPE ...
CVE-2020-7138
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerabilit...
CVE-2020-7139
CVE-2020-7139 affects HPE Nimble Storage systems running NimbleOS. Affected versions include pre-fix releases; a software fix is provided in NimbleOS versions 3.9.3.0, 4.5.6.0, 5.0.9.0, and 5.1.4.100. The CVSS metrics indicate a network-based, high-severity issue with partial confidentiality and ...
CVE-2020-7139
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this...
CVE-2020-7137
The CVE-2020-7137 issue affects HPE Superdome Flex Server’s RMC component. A validation flaw can lead to local elevation of privilege. Affected product: HPE Superdome Flex Server (RMC). Root cause: input/validation failure in RMC that allows escalation of privileges. Impact (as stated): local ele...