PT-2022-24160 · Hewlett Packard · Hp Enterprise Nimble Storage Hybrid Flash Arrays+1

Published 2022-11-03 · Updated 2022-12-13 · CVE-2022-37929

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays (affected versions not specified) Hewlett Packard Enterprise Nimble Storage Secondary Flash Arrays (affected versions not specified)

Description The issue is related to Improper Privilege Management. It affects Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-37929

Affected Products

Hp Enterprise Nimble Storage Hybrid Flash Arrays

Hp Enterprise Nimble Storage Secondary Flash Arrays

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-37929 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04360en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37929 · Vendor Advisory
• https://t.me/cibsecurity/54306 · Telegram Post