8.8

CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Oneview Version 5.0
Hp ≫ Oneview Version 5.00.01
Hp ≫ Oneview Version 5.00.02
Hp ≫ Oneview Version 5.2
Hp ≫ Oneview Version 5.3
Hp ≫ Oneview Version 5.4
Hp ≫ Oneview Version 5.20.01
Hp ≫ Synergy Composer Version 5.0
Hp ≫ Synergy Composer Version 5.00.01
Hp ≫ Synergy Composer Version 5.00.02
Hp ≫ Synergy Composer Version 5.2
Hp ≫ Synergy Composer Version 5.3
Hp ≫ Synergy Composer Version 5.4
Hp ≫ Synergy Composer Version 5.20.01
Hp ≫ Synergy Composer 2 Version 5.0
Hp ≫ Synergy Composer 2 Version 5.00.01
Hp ≫ Synergy Composer 2 Version 5.00.02
Hp ≫ Synergy Composer 2 Version 5.2
Hp ≫ Synergy Composer 2 Version 5.3
Hp ≫ Synergy Composer 2 Version 5.4
Hp ≫ Synergy Composer 2 Version 5.20.01
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.06% 0.794
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us
Vendor Advisory