CVE-2018-7108

MEDIO 5.9CVE-2018-7108 · Published 27/09/2018 · updated 17/06/2026

In breve

CVE-2018-7108 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda storageworks xp7 automation director (hpe).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.5% delle vulnerabilità.
Correzione: aggiornare a 8.6.1-00 o successiva.

Package	Affected versions	Patched versions
storageworks xp7 automation director hpe	`≥ 8.5.2-02, < 8.6.1-00`	`8.6.1-00`

Description

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.

References

securitytracker.com/id/1041696 · Third Party Advisory
support.hpe.com/hpsc/doc/public/display · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free