Description (CNA)
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / HP OneView; HPE Synergy Composer; HPE Synergy Composer 2 | affected 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.