CVE-2020-7196

MEDIO 6.5CVE-2020-7196 · Published 26/10/2020 · updated 17/06/2026

In breve

CVE-2020-7196 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda bluedata epic (hp), ezmeral container platform (hp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.86%, superiore al 58.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bluedata epic hp	`≤ 4.0`	No fix yet
ezmeral container platform hp	`= 5.0`	No fix yet

Description

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url "/bdswebui/assignusers/".

References

support.hpe.com/hpsc/doc/public/display · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free