241 matches found
CVE-2018-7094
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-5.0.0.0-22913GA. The vulnerability may be exploited locally to allow disclosure of privileged information...
CVE-2018-7098
CVE-2018-7098 affects 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability can be exploited locally to perform directory traversal, potentially impacting confidentiality and integrity. Upgrade to SP-4.4.0.GA-110(MU7) to mitigate.
CVE-2018-7097: Cross-Site Request Forgery (CSRF)
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow cross-site request forgery...
CVE-2018-7099: Undefined Security Weakness
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be locally exploited to allow disclosure of privileged information...
CVE-2018-7098: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be locally exploited to allow directory traversal...
CVE-2018-7095: Undefined Security Weakness
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow access restriction bypass...
CVE-2018-7094: Undefined Security Weakness
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-5.0.0.0-22913GA. The vulnerability may be exploited locally to allow disclosure of privileged information...
CVE-2018-7096: Undefined Security Weakness
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow code execution...
CVE-2018-9065
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...
CVE-2018-9065
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...
CVE-2018-9065
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...
Code injection
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...
CVE-2018-9065
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...
HP 3PAR Service Processor Information Disclosure Vulnerability
HP 3PAR Service Processor SP is optional software in a suite of HP 3PAR storage solutions from Hewlett-Packard HP in the United States. A security vulnerability exists in HP 3PAR SP. A remote attacker could exploit the vulnerability to obtain sensitive information...
CVE-2015-5443
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
Information disclosure
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2015-5443
The CVE-2015-5443 entry concerns HP 3PAR Service Processor SPOCC, where remote authenticated users could obtain sensitive information. Affected SPOCC versions are SP 4.2.0.GA-29 (GA), SP 4.3.0.GA-17 (GA), and SP 4.3.0-GA-24 (MU1). The vulnerability is described as an information disclosure with u...
CVE-2015-5443
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04822249 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04822249 Version: 1 HPSBST03502 rev.1 - HP 3PAR Service Processor SP SPOCC, Remot...