5736 matches found
Design/Logic Flaw
Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a...
CVE-2019-11996
CVE-2019-11996 is a vulnerability in HPE Nimble Storage systems in multi-array group configurations that could allow an attacker to gain elevated privileges on the array. The fix is available in NimbleOS versions 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0 (and later releases). Exploitation details are...
CVE-2019-11996
Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a...
Micro Focus (HPE) Data Protector SUID Privilege Escalation Exploit
This Metasploit module exploits the trusted $PATH environment variable of the SUID binary omniresolve in Micro Focus HPE Data Protector versions A.10.40 and below. The omniresolve executable calls the oracleasm binary using a relative path and the trusted environment $PATH, which allows an attack...
HPESBHF03960 rev.1 - HPE Lights Out 100 (LO100) Remote Management for ProLiant G1 - G6 servers, Remote Denial of Service
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Lights-Out 100 LO100 Remote Management all - denial of service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-12264 |...
HPESBST03959 rev.1 - HPE Command View Advanced Edition (CVAE) Multiple Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP7 CVAE Earlier than 8.6.5-00 HPE XP7 Command View Advanced Edition Suite Earlier than 8.6.5-00 CVSS Scores: | CVE | CVSS Vector | Base...
SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2019:2454-1)
This update for dovecot22 fixes the following issues : CVE-2019-11500: Fixed a potential remote code execution in the IMAP and ManageSieve protocol parsers bsc1145559. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...
HPE Intelligent Management Center 7.3 E0506P09 - Information Disclosure
HPE Intelligent Management Center 7.3 E0506P09 - Information Disclosure !/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com...
HPE Intelligent Management Center Information Disclosure
!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...
HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure Exploit
!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...
HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure
!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...
HP Smart Update Manager Remote Unauthorized Access.
The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...
How to Use Multiple Backup Repositories Pointing to a Single Catalyst Store
Product Improvement Starting in Veeam Backup & Replication 13.1, multiple backup repositories sharing a single HPE StoreOnce Catalyst Store can be created, edited, and rescanned directly in the Veeam Backup & Replication Console using the Folder field of the New Backup Repository wizard. For...
SUSE SLED12 / SLES12 Security Update : bzip2 (SUSE-SU-2019:2013-1)
This update for bzip2 fixes the following issues : Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
CVE-2019-5403
A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media versions: prior to 3.5.0.1...
CVE-2019-5404
A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media versions: prior to 3.5.0.1...
CVE-2019-5406
A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media versions: prior to 3.5.0.1...
CVE-2019-5400
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...