Vulnerabilidades

A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.

A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.

A remote code execution issue exists in HPE OneView.

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).

This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.

HPE OneView may have a missing passphrase during restore.

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.

HPE OneView may allow command injection with local privilege escalation.

A remote code execution issue exists in HPE OneView.

A remote authentication bypass issue exists in some OneView APIs.

A remote authentication bypass issue exists in a OneView API.

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

An HPE OneView appliance dump may expose SNMPv3 read credentials

An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules

An HPE OneView appliance dump may expose SAN switch administrative credentials

An HPE OneView appliance dump may expose OneView user accounts

An HPE OneView appliance dump may expose proxy credential settings

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump

An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).

A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this…

A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.

A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.