CVE-2022-23699 - A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6

Back Back to CVE browser

HIGH

A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6

Published Apr 4, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.29%

Description

A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.

Affected products

Vendor n/a Product HPE OneView Default
unknown
Affected
- Prior to 6.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	HPE OneView	unknown	Affected Prior to 6.6

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28638
Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28638		Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04252en_us		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hpe

Published Apr 4, 2022

Updated Aug 3, 2024

Reserved Jan 19, 2022

Link CVE-2022-23699

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-23699

Red Hat

No data

ENISA EUVD

Assigner hpe

Published Apr 4, 2022

Updated Aug 3, 2024

Link EUVD-2022-28638

GitHub

No data