Lucene search

HpeCVE-2022-37935

HistoryMar 01, 2023 - 8:15 a.m.

CVE-2022-37935

2023-03-0108:15:10

hpe

web.nvd.nist.gov

cve-2022-37935

hpe oneview

vmware vcenter

credentials disclosure

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

13.3%

JSON

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.

Affected configurations

Nvd

Node

hponeview_for_vmware_vcenterRange10.0–10.4

hponeview_for_vmware_vcenterRange11.0–11.2

hponeview_for_vmware_vcenterMatch9.6

VendorProductVersionCPE
hponeview_for_vmware_vcenter*cpe:2.3:a:hp:oneview_for_vmware_vcenter:*:*:*:*:*:*:*:*
hponeview_for_vmware_vcenter9.6cpe:2.3:a:hp:oneview_for_vmware_vcenter:9.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	oneview_for_vmware_vcenter	*	cpe:2.3:a:hp:oneview_for_vmware_vcenter::::::::
hp	oneview_for_vmware_vcenter	9.6	cpe:2.3:a:hp:oneview_for_vmware_vcenter:9.6:::::::*

CNA Affected

[
  {
    "versions": [
      {
        "version": "9.6",
        "status": "affected",
        "lessThanOrEqual": "11.2",
        "versionType": "product"
      }
    ],
    "product": "HPE OneView for VMware vCenter,",
    "vendor": "Hewlett Packard Enterprise (HPE)"
  }
]

References

support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

13.3%

JSON

Related for CVE-2022-37935