PT-2020-9235

CVE-2019-12001

·

Published

2020-04-17

·

Updated

2020-04-28

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HPE MSA 2040 SAN Storage version GL225P001 and earlier HPE MSA 1040 SAN Storage version GL225P001 and earlier HPE MSA 1050 SAN Storage version VE270R001-01 and earlier HPE MSA 2042 SAN Storage version GL225P001 and earlier HPE MSA 2050 SAN Storage version VL270R001-01 and earlier HPE MSA 2052 SAN Storage version VL270R001-01 and earlier
Description A remote session reuse vulnerability leading to access restriction bypass was discovered. This issue allows for the bypass of access restrictions.
Recommendations For HPE MSA 2040 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 1040 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 1050 SAN Storage version VE270R001-01 and earlier, update to a version later than VE270R001-01. For HPE MSA 2042 SAN Storage version GL225P001 and earlier, update to a version later than GL225P001. For HPE MSA 2050 SAN Storage version VL270R001-01 and earlier, update to a version later than VL270R001-01. For HPE MSA 2052 SAN Storage version VL270R001-01 and earlier, update to a version later than VL270R001-01.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾