PT-2021-18122

Name of the Vulnerable Software and Affected Versions: HPE Edgeline Infrastructure Manager versions prior to 1.22 Description: A security issue has been identified that could be remotely exploited to bypass remote authentication, leading to the execution of arbitrary commands, gaining privileged...

CVE-2021-29203: Missing Authentication for Critical Function

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands,...

Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool

Hewlett Packard Enterprise HPE is urging customers to patch one of its premier edge application management tools that could allow an attacker to carry out a remote authentication bypass attack and infiltrate a customer’s cloud infrastructure. Join Threatpost for “Fortifying Your Business Against...

HPESBGN04124 rev.4 - HPE Edgeline Infrastructure Manager, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to version 1.23 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29203 |...

HPE Edgeline Infrastructure Manager Detection

Binary data hpeeimdetect.nbin...

HPE Edgeline Infrastructure Manager Authentication Bypass

Binary data hpeeimcve-2020-7199.nbin...

HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities

Exploit Title: HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities Date: 12-28-2020 Exploit Author: Jeremy Brown Vendor Homepage: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTXf62aaafe780a496dad6d28621a Software Link:...

CVE-2020-7199

CVE-2020-7199 concerns HPE Edgeline Infrastructure Manager (Edgeline Infrastructure Management Software). The connected Red Hat, CNVD, CNVD-like and security feeds corroborate a vulnerability that can be remotely exploited to bypass remote authentication, leading to execution of arbitrary command...

CVE-2020-7199

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged...

CVE-2020-7199: Improper Authentication

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged...

PT-2020-19459

Name of the Vulnerable Software and Affected Versions HPE Edgeline Infrastructure Manager affected versions not specified Description A security issue has been identified that could be remotely exploited to bypass remote authentication. This could lead to the execution of arbitrary commands,...

HPESBGN04063 rev.1 - HPE Edgeline Infrastructure Manager, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.21 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7199 |...

New Relic: User to Admin privilege escalation in Infrastructure Conditions - /v2/accounts/1835740/alerts/conditions

Details The endpoints POST /v2/accounts/:accountid/alerts/conditions create new and PUT /v2/accounts/:accountid/alerts/conditions/:conditionid update existing on infrastructure-alert.service.newrelic.com are vulnerable to privilege escalation. As per the screenshot below, an account with regular...

The vulnerability of the Unified Infrastructure Manager, a monitoring program for IT infrastructure, allows a perpetrator to bypass the authentication process through the LDAP service.

The vulnerability of the Unified Infrastructure Manager’s IT-infrastructure monitoring software exists due to an error in the access management subsystem. Exploiting this vulnerability allows a malicious actor to bypass the authentication process through the LDAP service, by providing only the...

EMC Unified Infrastructure Manager/Provisioning authentication bypass

Authentication bypass if LDAP authentication is used...

Authentication flaw

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

PT-2015-1320

Name of the Vulnerable Software and Affected Versions EMC Unified Infrastructure Manager/Provisioning UIM/P version 4.1 Description The issue exists due to an error in the access control subsystem, allowing a remote attacker to bypass the authentication procedure via the LDAP service by providing...

CVE-2015-0546: Undefined Security Weakness

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...