PT-2021-17056
CVE-2021-26579
·
Published
2021-03-30
·
Updated
2022-05-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HPE Unified Data Management (UDM) versions prior to 1.2103.0
Description
A security issue in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information due to the use of hard-coded cryptographic keys.
Recommendations
For versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM), update to version 1.2103.0 to remove all hard-coded cryptographic keys.
For versions prior to 1.2009.0, update to version 1.2103.0 to remove all hard-coded cryptographic keys.
Found an issue in the description? Have something to add? Feel free to write us 👾