HPE OneView Security Update

[Thaufique_Mod]

VULNERABILITY SUMMARY

Potential security vulnerabilities have been identified in Hewlett Packard Enterprise OneView Software. These vulnerabilities could be exploited allowing a remote attacker to cause a denial of service, code execution or source code disclosure, information disclosure, server-side request forgery (SSRF), and local script execution.

Click the link below from HPE Support Center to get detailed information:

HPESBGN04853 rev.1 - HPE OneView, Multiple Local and Remote Vulnerabilities

[tirtul]

Given the severity of the vulnerability, will workarounds or patches be made available for older releases that some may have for legacy systems?

[DanCernese]

Product manage has shared in our partner-facing slack channel that there are no plans to update prior releases at this time.

[Kearawill]

Thanks for the heads-up. Important reminder to stay on top of updates — especially with vulnerabilities like SSRF and code execution in the mix. Will review the advisory and patch ASAP.