5.5

CVE-2022-37930

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hpe ≫ Sf100 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Sf100 Version -
Hpe ≫ Sf100 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Sf100 Version -
Hpe ≫ Sf300 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Sf300 Version -
Hpe ≫ Sf300 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Sf300 Version -
Hpe ≫ Hf60c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf60c Version -
Hpe ≫ Hf60c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf60c Version -
Hpe ≫ Hf40c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf40c Version -
Hpe ≫ Hf40c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf40c Version -
Hpe ≫ Hf20 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20 Version -
Hpe ≫ Hf20 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20 Version -
Hpe ≫ Hf40 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf40 Version -
Hpe ≫ Hf40 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf40 Version -
Hpe ≫ Hf60 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf60 Version -
Hpe ≫ Hf60 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf60 Version -
Hpe ≫ Hf20h Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20h Version -
Hpe ≫ Hf20h Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20h Version -
Hpe ≫ Hf20c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20c Version -
Hpe ≫ Hf20c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
HPE 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04361en_us
Vendor Advisory