PT-2024-9116 · Hewlett Packard · Hpe Autopass License Server

Published 2024-11-25 · Updated 2025-07-14 · CVE-2024-51770

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server (affected versions not specified)

Description: The issue is related to incorrect restriction of XML links to external objects in the HPE AutoPass License Server software. Exploitation of this issue may allow an attacker to access confidential information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

CWE-497

Related Identifiers

BDU:2024-10802

CVE-2024-51770

ZDI-24-1634

Affected Products

Hpe Autopass License Server

References · 10

• https://zerodayinitiative.com/advisories/ZDI-24-1634 · Security Note
• https://bdu.fstec.ru/vul/2024-10802 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51770 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51770 · Security Note
• https://twitter.com/CVEnew/status/1944717317918666779 · Twitter Post
• https://t.me/cvetracker/27766 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us · Note
• https://t.me/cvenotify/128827 · Telegram Post