PT-2020-19392 · Hewlett Packard · Hpe Oneview Global Dashboard

Published 2020-03-04 · Updated 2020-03-05 · CVE-2020-7130

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE OneView Global Dashboard versions 1.9

Description The issue is a remote information disclosure vulnerability. After upgrading or installing HPE OneView Global Dashboard version 1.9, the appliance firewall may leave ports open. This vulnerability is resolved in version 1.91 or later.

Recommendations For HPE OneView Global Dashboard version 1.9, update to version 1.91 or later to resolve the issue. As a temporary workaround, consider restricting access to the open ports to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-7130

Affected Products

Hpe Oneview Global Dashboard

References · 4

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf03987en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7130 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7130 · Vendor Advisory
• https://t.me/cvenotify/1334 · Telegram Post