CVE-2022-28618

Name of the Vulnerable Software and Affected Versions HPE Nimble Storage versions prior to 5.0.10.100 HPE Nimble Storage versions prior to 5.2.1.0 HPE Nimble Storage versions prior to 6.0.0.100

Description A command injection security issue has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays. This could allow an attacker to execute arbitrary commands on a Nimble appliance.

Recommendations For versions prior to 5.0.10.100, update to version 5.0.10.100 or later. For versions prior to 5.2.1.0, update to version 5.2.1.0 or later. For versions prior to 6.0.0.100, update to version 6.0.0.100 or later.