CVE-2018-7097

CVE-2018-7097 concerns HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110 (MU7), where a remote attacker could exploit a cross-site request forgery (CSRF) vulnerability to perform unauthorized operations. Affected product: 3PAR SP on VMware vSphere hypervisor. Root cause details are not pro...

CVE-2018-7095

The CVE-2018-7095 entry describes an access-restriction bypass in HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110 (MU7). The CNVD/NVD records confirm a remote bypass vulnerability in SP that could allow unauthorized access; exploitation status and concrete remediation are not provided in...

CVE-2018-7096

The CVE-2018-7096 entry concerns the HPE 3PAR Service Processor (SP). Affected are SPs versioned prior to SP-4.4.0.GA-110 (MU7); the vulnerability is exploitable remotely to achieve code execution. Several connected sources corroborate that this is a remote-code-execution issue in the 3PAR SP sta...

CVE-2018-7099

The CVE-2018-7099 entry describes a vulnerability in HPE 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). A local attacker could disclose privileged information via the SP, with CVSSv3.0 indicating LOCAL access, LOW attack complexity, and Privileges Required: LOW, resulting in HIGH conf...

CVE-2018-7098

CVE-2018-7098 affects 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability can be exploited locally to perform directory traversal, potentially impacting confidentiality and integrity. Upgrade to SP-4.4.0.GA-110(MU7) to mitigate.