PT-2025-23519 · Hewlett Packard · Hpe Storeonce

Published

2024-10-31

·

Updated

2025-08-07

·

CVE-2025-37093

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HPE StoreOnce versions prior to 4.3.11
Description The issue is related to an authentication bypass vulnerability in HPE StoreOnce, which could allow remote attackers to bypass security restrictions. This vulnerability is caused by improper implementation of the machineAccountCheck method. The vulnerability may be chained with other flaws for remote code execution and data exposure. It is recommended to update to version 4.3.11 to reduce the risk of exploitation.
Recommendations Update to version 4.3.11 to fix the authentication bypass vulnerability. As a temporary workaround, consider restricting access to the vulnerable system until a patch is available. Avoid using the system for critical operations until the issue is resolved. Update to version 4.3.11 to prevent potential exploits and reduce the risk of ransomware and data breaches.

Fix

RCE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-06380
CVE-2025-37093
ZDI-25-316

Affected Products

Hpe Storeonce