PT-2021-17063 · Hewlett Packard · Hpe Storeonce

Published 2021-09-27 · Updated 2021-10-05 · CVE-2021-26587

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HPE StoreOnce versions prior to 4.3.0

Description A potential DOM-based Cross Site Scripting security issue has been identified. The issue could be remotely exploited to cause an elevation of privilege, leading to partial impact to confidentiality, availability, and integrity.

Recommendations For versions prior to 4.3.0, update to HPE StoreOnce 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-26587

Affected Products

Hpe Storeonce

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26587 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04176en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26587 · Vendor Advisory
• https://t.me/cibsecurity/29481 · Telegram Post
• https://t.me/cvenotify/21938 · Telegram Post