CVE-2020-7130: Infoleak

Published Mar 4, 2020

Updated

HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Ports Open. This is resolved in OVGD 1.91 or later.

Affected Software

1 affected component

HP OneView Global Dashboard=1.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HPE OneView Global Dashboard (OVGD) to a version that resolves this vulnerability.
Fixed in 1.91

Event History

Mar 4, 2020

CVE Published

via MITRE·08:21 PM

Data Sourced

via MITRE·08:21 PM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-7130?

CVE-2020-7130 is classified as a remote information disclosure vulnerability.

How do I fix CVE-2020-7130?

To fix CVE-2020-7130, upgrade to HPE OneView Global Dashboard version 1.91 or later.

What versions of HPE OneView Global Dashboard are affected by CVE-2020-7130?

HPE OneView Global Dashboard version 1.9 is affected by CVE-2020-7130.

What kind of vulnerability is CVE-2020-7130?

CVE-2020-7130 is a remote information disclosure vulnerability that may expose sensitive data.

What happens if I don't address CVE-2020-7130?

Failing to address CVE-2020-7130 can lead to the exposure of sensitive information due to open ports left by the appliance firewall.