PT-2020-9236 · Hewlett Packard · Hpe Msa 2050 San Storage+5

Published 2020-04-17 · Updated 2020-04-28 · CVE-2019-12002

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE MSA 2040 SAN Storage versions GL225P001 and earlier HPE MSA 1040 SAN Storage versions GL225P001 and earlier HPE MSA 1050 SAN Storage versions VE270R001-01 and earlier HPE MSA 2042 SAN Storage versions GL225P001 and earlier HPE MSA 2050 SAN Storage versions VL270R001-01 and earlier HPE MSA 2052 SAN Storage versions VL270R001-01 and earlier

Description A remote session reuse vulnerability leading to access restriction bypass was discovered. This issue allows for the bypass of access restrictions.

Recommendations For HPE MSA 2040 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 1040 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 1050 SAN Storage version VE270R001-01 and earlier, update to a version later than VE270R001-01. For HPE MSA 2042 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 2050 SAN Storage version VL270R001-01 and earlier, update to a version later than VL270R001-01. For HPE MSA 2052 SAN Storage version VL270R001-01 and earlier, update to a version later than VL270R001-01.

Fix

Related Identifiers

CVE-2019-12002

Affected Products

Hpe Msa 1040 San Storage

Hpe Msa 1050 San Storage

Hpe Msa 2040 San Storage

Hpe Msa 2042 San Storage

Hpe Msa 2050 San Storage

Hpe Msa 2052 San Storage

References · 5

• https://osv.dev/vulnerability/CVE-2019-12002 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12002 · Security Note
• https://t.me/cvenotify/2875 · Telegram Post
• https://t.me/cibsecurity/11380 · Telegram Post