PT-2020-19398

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager SUM versions prior to 8.5.6 Description A security issue in HPE Smart Update Manager could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this issue...

CVE-2020-7136: Undefined Security Weakness

A security vulnerability in HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager SUM prior to 8.5.6. Please visit the HPE Support Center at...

HPESBMU03997 rev.1 - HPE Smart Update Manager (SUM), Remote Unauthorized Access

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Smart Update Manager SUM -Prior to v8.5.6 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-2921 |...

HP Smart Update Manager Remote Unauthorized Access.

The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...

HP Smart Update Manager Remote Unauthorized Access.

The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...

HPE Smart Update Manager Security Feature Issue Vulnerability

HPE Smart Update Manager SUM is a smart update manager from Hewlett Packard Enterprise HPE, USA. It is used to install and update firmware and software components on HP ProLiant and HP Integrity servers, chassis, and options. A security feature issue vulnerability exists in versions of HPE SUM...

CVE-2019-11988

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11988

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11987

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

Privilege escalation

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

Design/Logic Flaw

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11988

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11988

CVE-2019-11988 affects HPE Smart Update Manager (SUM) prior to version 8.3.5. The vulnerability is a Remote Unauthorized Access flaw caused by an authentication bypass that allows an unauthenticated, remote attacker to bypass login and perform arbitrary actions in SUM. The NVD entry lists high/cr...

CVE-2019-11987

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

CVE-2019-11987

CVE-2019-11987 affects HPE Smart Update Manager (SUM) prior to v8.4. The vulnerability allows local unauthorized elevation of privilege due to insufficient authentication/authorization and privilege management. Affected component is SUM’s update/management workflow on HP ProLiant servers. Impact ...

PT-2019-12620

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager versions prior to 8.4 Description A security issue in HPE Smart Update Manager could allow local unauthorized elevation of privilege. Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve...

PT-2019-12621

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager SUM versions prior to 8.3.5 Description A Remote Unauthorized Access issue was identified. Recommendations For versions prior to 8.3.5, update to version 8.3.5 or later to resolve the issue...

CVE-2019-11988: Undefined Security Weakness

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11987: Undefined Security Weakness

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

HPESBMU03923 rev.2 - HPE Smart Update Manager (SUM), Local Unauthorized Elevation of Privilege

Potential Security Impact: Local: Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Smart Update Manager SUM Prior to 8.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11987 |...