PT-2022-19110 · Hewlett Packard · Hpe Storeonce

Published 2022-06-27 · Updated 2022-07-07 · CVE-2022-28622

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE StoreOnce Software versions prior to 4.3.2

Description A potential security issue has been identified in the SSH server of the affected software, where it supports weak key exchange algorithms. This could lead to remote unauthorized access.

Recommendations For versions prior to 4.3.2, update to version 4.3.2 to resolve the issue. As a temporary workaround, consider restricting access to the SSH server until the update is applied.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2022-28622

Affected Products

Hpe Storeonce

References · 4

• https://osv.dev/vulnerability/CVE-2022-28622 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04311en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28622 · Security Note
• https://t.me/cibsecurity/45218 · Telegram Post