NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0085)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor emulates a preemption timer for L2 guests when nested =1...

CVE-2019-5400

A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5400

A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5399

A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5397

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5398

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5399

A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Cross site scripting

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Design/Logic Flaw

A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5395

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5396

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5396

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5400

A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5399

The CVE-2019-5399 entry describes a remote gain of authorized access vulnerability in HPE 3PAR Service Processor, affected on versions prior to 5.0.5.1. Connected documents corroborate that the issue concerns HPE 3PAR SP and cites an over-the-horizon access flaw enabling an attacker with network ...

CVE-2019-5398

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5398

CVE-2019-5398 describes a remote cross-site scripting vulnerability in HPE 3PAR Service Processor (SP). Affected product: HPE 3PAR Service Processor versions prior to 5.0.5.1. Vulnerable component: SP web interface exposing XSS risk (exact internal vector not specified in the provided documents)....

CVE-2019-5397

CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...

CVE-2019-5396

CVE-2019-5396 affects HPE 3PAR Service Processor; prior to version 5.0.5.1, there is a remote authentication bypass vulnerability in the SP management interface. The issue allows an attacker with network access and no privileges to bypass authentication, potentially compromising confidentiality (...

CVE-2019-5396

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5395

HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...