PT-2020-19457 · Hewlett Packard · Hpe 3Par Storeserv Management Console+1

Published 2020-10-25 · Updated 2020-11-17 · CVE-2020-7197

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE StoreServ Management Console (SSMC) version 3.7.0.0

Description The issue concerns a remote authentication bypass in HPE StoreServ Management Console (SSMC), which is an off-node multi-array manager web application. This application remains isolated from the data on the managed arrays.

Recommendations For HPE StoreServ Management Console (SSMC) version 3.7.0.0, upgrade to HPE 3PAR StoreServ Management Console 3.7.1.1 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-7197

Affected Products

Hpe 3Par Storeserv Management Console

Hpe Storeserv Management Console

References · 5

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04045en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7197 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7197 · Vendor Advisory
• https://t.me/ckure/5823 · Telegram Post
• https://t.me/cvenotify/5655 · Telegram Post