CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Link	Resource
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us	Vendor Advisory

Configuration 1

cpe:2.3:a:hp:oneview:5.0:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.00.01:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.00.02:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.2:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.20.01:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.3:*:*:*:*:*:*:* cpe:2.3:a:hp:oneview:5.4:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.0:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.00.01:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.00.02:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.2:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.20.01:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.3:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer_2:5.4:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.0:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.00.01:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.00.02:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.2:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.20.01:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.3:*:*:*:*:*:*:* cpe:2.3:a:hp:synergy_composer:5.4:*:*:*:*:*:*:*

---

Published : 2020-11-06 03:15

Updated : 2021-07-21 11:39

---

NVD link : CVE-2020-7198

Mitre link : CVE-2020-7198

No products.

NVD-CWE-noinfo