CVE-2020-7198: High severity hpe oneview vulnerability

Published Nov 6, 2020

Updated

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Affected Software

21 affected components

HP OneView=5.0

HP OneView=5.00.01

HP OneView=5.00.02

HP OneView=5.2

HP OneView=5.3

HP OneView=5.4

HP OneView=5.20.01

HP Synergy Composer=5.0

HP Synergy Composer=5.00.01

HP Synergy Composer=5.00.02

HP Synergy Composer=5.2

HP Synergy Composer=5.3

HP Synergy Composer=5.4

HP Synergy Composer=5.20.01

HP Synergy Composer 2=5.0

HP Synergy Composer 2=5.00.01

HP Synergy Composer 2=5.00.02

HP Synergy Composer 2=5.2

HP Synergy Composer 2=5.3

HP Synergy Composer 2=5.4

HP Synergy Composer 2=5.20.01

Event History

Nov 6, 2020

CVE Published

via MITRE·02:14 PM

Data Sourced

via MITRE·02:14 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2020-7198.

What is the severity of CVE-2020-7198?

The severity of CVE-2020-7198 is high with a CVSS score of 8.8.

What is the affected software for CVE-2020-7198?

The affected software for CVE-2020-7198 includes HP OneView and Hp Synergy Composer versions 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4, and 5.20.01, as well as Hp Synergy Composer 2 versions 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4, and 5.20.01.

How can I fix CVE-2020-7198?

To fix CVE-2020-7198, you need to update to version 5.5 of OneView, Composer, or Composer2.

Where can I find more information about CVE-2020-7198?

You can find more information about CVE-2020-7198 [here](https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us).