CVE-2021-26585 — Resource Exposure in Packard Enterprise HPE Oneview Global Dashboard

CWE-668 — Resource Exposure5 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 83.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hewlett Packard Enterprise HPE Oneview Global DashboardHPE Oneview Global Dashboard
Timeline
PublishedJun 24
Latest updateJul 30

Description

A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

4
OSV
linux-aws, linux-aws-5.4 vulnerabilities↗2024-07-30
▶
OSV
linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabili↗2024-07-29
▶
GHSA
GHSA-4x87-37h3-grrr: A potential vulnerability has been identified in HPE OneView Global Dashboard release 2↗2022-05-24
▶
CVEList
CVE-2021-26585: A potential vulnerability has been identified in HPE OneView Global Dashboard release 2↗2021-06-24
▶
CVE-2021-26585 — Resource Exposure | cvebase