PT-2023-23038 · Hewlett Packard · Hpe Oneview

Published 2023-09-07 · Updated 2024-11-12 · CVE-2023-30908

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE OneView (affected versions not specified)

Description A remote authentication bypass issue exists in the HPE OneView API. This issue could be remotely exploited to allow authentication bypass, disclosure of sensitive information, and denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-30908

ZDI-23-1402

Affected Products

Hpe Oneview

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2023-30908 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30908 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-1402 · Security Note
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04530en_us · Vendor Advisory
• https://twitter.com/cracbot/status/1700026265531817999 · Twitter Post
• https://twitter.com/RsSI47041968/status/1700186130006814900 · Twitter Post
• https://t.me/cibsecurity/70119 · Telegram Post
• https://twitter.com/TheZDIBugs/status/1701349607836434476 · Twitter Post
• https://t.me/cvenotify/58017 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1699946466230325271 · Twitter Post
• https://twitter.com/Komodosec/status/1700018153869414529 · Twitter Post
• https://twitter.com/CVEnew/status/1699899884378226817 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1699998863678206429 · Twitter Post
• https://twitter.com/HunterMapping/status/1700094124723232889 · Twitter Post
• https://twitter.com/fridaysecurity/status/1699998953314394203 · Twitter Post