PT-2018-17904

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 4.4.0.GA-110MU7 Description A security issue was identified that may allow disclosure of privileged information through local exploitation. Recommendations For versions prior to 4.4.0.GA-110MU7, update ...

PT-2018-17901

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 4.4.0.GA-110MU7 Description A security issue was identified that may allow remote code execution. Recommendations For versions prior to 4.4.0.GA-110MU7, update to version 4.4.0.GA-110MU7 or later to...

PT-2018-17902

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 4.4.0.GA-110MU7 Description A security issue was identified that may be exploited remotely to allow cross-site request forgery. Recommendations For versions prior to 4.4.0.GA-110MU7, update to version...

PT-2018-17900

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 4.4.0.GA-110MU7 Description A security issue was identified that may allow access restriction bypass. This issue can be exploited remotely. Recommendations For versions prior to 4.4.0.GA-110MU7, update ...

PT-2018-17899

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 5.0.0.0-22913GA Description A security issue was identified that may allow disclosure of privileged information through local exploitation. Recommendations For versions prior to 5.0.0.0-22913GA, update ...

PT-2018-17903

Name of the Vulnerable Software and Affected Versions 3PAR Service Processor versions prior to 4.4.0.GA-110MU7 Description A security issue was identified that may be locally exploited to allow directory traversal. Recommendations For versions prior to 4.4.0.GA-110MU7, update to version...

CVE-2018-7094: Undefined Security Weakness

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-5.0.0.0-22913GA. The vulnerability may be exploited locally to allow disclosure of privileged information...

CVE-2018-7096: Undefined Security Weakness

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow code execution...

HPESBST03870 rev.2 - HPE 3PAR Service Processor (SP), Local Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-5.0.0.0-22913GA - All SP 4.x versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-709...

HPESBST03861 rev.2 - HPE 3PAR Service Processor (SP), Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Directory Traversal, Disclosure of Privileged Information; Remote: Access Restriction Bypass, Code Execution, Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-4.4.0.GA-110MU7...

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

Code injection

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

HP 3PAR Service Processor Information Disclosure Vulnerability

HP 3PAR Service Processor SP is optional software in a suite of HP 3PAR storage solutions from Hewlett-Packard HP in the United States. A security vulnerability exists in HP 3PAR SP. A remote attacker could exploit the vulnerability to obtain sensitive information...

CVE-2015-5443

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

Information disclosure

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-5443

The CVE-2015-5443 entry concerns HP 3PAR Service Processor SPOCC, where remote authenticated users could obtain sensitive information. Affected SPOCC versions are SP 4.2.0.GA-29 (GA), SP 4.3.0.GA-17 (GA), and SP 4.3.0-GA-24 (MU1). The vulnerability is described as an information disclosure with u...

CVE-2015-5443

HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...