PT-2024-9117 · Hewlett Packard · Hpe Autopass License Server

Published 2024-11-25 · Updated 2025-07-14 · CVE-2024-51769

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server (affected versions not specified)

Description: The issue is related to a lack of protection against SQL query structure exploitation in the HPE AutoPass License Server software, which can lead to information disclosure. An attacker could potentially gain access to confidential information by exploiting this weakness.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

SQL injection

Weakness Enumeration

CWE-200

CWE-89

Related Identifiers

BDU:2024-10803

CVE-2024-51769

ZDI-24-1633

Affected Products

Hpe Autopass License Server

References · 11

• https://osv.dev/vulnerability/CVE-2024-51769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51769 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1633 · Security Note
• https://bdu.fstec.ru/vul/2024-10803 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-24-1633 · Note
• https://t.me/cvetracker/27765 · Telegram Post
• https://twitter.com/CVEnew/status/1944717319638307281 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://t.me/cvenotify/128826 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us · Note