PT-2023-2205 · Hewlett Packard · Hpe Oneview For Vmware Vcenter

Published 2023-02-17 · Updated 2023-08-08 · CVE-2022-37935

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE OneView for VMware vCenter (affected versions not specified)

Description The issue is related to insufficient protection of registration data, which may lead to the disclosure of the HPE OneView username and password. This could allow an attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Information Disclosure

Weakness Enumeration

CWE-522

CWE-200

Related Identifiers

BDU:2023-01951

CVE-2022-37935

Affected Products

Hpe Oneview For Vmware Vcenter

References · 6

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37935 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01951 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-37935 · Security Note
• https://vuldb.com/ru/?id.222063 · Note
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04449en_us · Note