There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
hp oneview 5.0 |
||
hp oneview 5.00.01 |
||
hp oneview 5.00.02 |
||
hp oneview 5.2 |
||
hp oneview 5.3 |
||
hp oneview 5.4 |
||
hp oneview 5.20.01 |
||
hp synergy composer 5.0 |
||
hp synergy composer 5.00.01 |
||
hp synergy composer 5.00.02 |
||
hp synergy composer 5.2 |
||
hp synergy composer 5.3 |
||
hp synergy composer 5.4 |
||
hp synergy composer 5.20.01 |
||
hp synergy composer 2 5.0 |
||
hp synergy composer 2 5.00.01 |
||
hp synergy composer 2 5.00.02 |
||
hp synergy composer 2 5.2 |
||
hp synergy composer 2 5.3 |
||
hp synergy composer 2 5.4 |
||
hp synergy composer 2 5.20.01 |
Vulmon