PT-2020-9232 · Hewlett Packard · Hpe Superdome Flex Server

Published 2020-01-16 · Updated 2020-01-29 · CVE-2019-11998

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Superdome Flex Server versions prior to v3.20.206

Description The issue is related to improper input validation of administrator commands, which could allow an administrator to bypass security restrictions. This may lead to information disclosure or denial of service.

Recommendations Apply firmware version v3.20.206 (released on 4 December 2019) or a newer version to resolve this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-11998

Affected Products

Hpe Superdome Flex Server

References · 3

• https://osv.dev/vulnerability/CVE-2019-11998 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11998 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us · Vendor Advisory