CVE-2021-22267
First published: Tue Feb 09 2021(Updated: )
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Web Viewpoint | >=06.03<=06.23.01 | |
| HP Web Viewpoint | >=15.08.00<=19.08.00 | |
| HP Web Viewpoint | >=t0320h01\^abw<=t0320h01\^acc | |
| HP Web Viewpoint | >=t0952h01\^aaq<=t0952h01\^aaw | |
| HP Web Viewpoint | >=t0952l01\^aar<=t0952l01\^aax | |
| HP Web Viewpoint | >=t0986h01\^aac<=t0986h01\^aai | |
| HP Web Viewpoint | >=t0986l01\^aad<=t0986l01\^aaj | |
| HP Web Viewpoint | =15.02.00 | |
| HP Web Viewpoint | =15.02.01 | |
| HP Web Viewpoint | =t0320l01\^aby | |
| HP Web Viewpoint | =t0320l01\^acd | |
| HP NonStop |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-22267?
CVE-2021-22267 is classified as a high severity vulnerability due to its potential for a remote replay attack.
How do I fix CVE-2021-22267?
To mitigate CVE-2021-22267, it is recommended to update the HPE Web ViewPoint Suite to the latest version that addresses this vulnerability.
Which versions of the HPE Web ViewPoint Suite are affected by CVE-2021-22267?
CVE-2021-22267 affects HPE Web ViewPoint versions from 15.02.00 up to 19.08.00 and specific versions between 06.03 and 06.23.01.
What types of attacks can be performed using CVE-2021-22267?
CVE-2021-22267 allows for a remote replay attack, enabling unauthorized actions through the exploitation of session data.
Is HPE NonStop affected by CVE-2021-22267?
HPE NonStop systems are not affected by CVE-2021-22267, as they are explicitly listed as non-vulnerable.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- vendor/hpe
- canonical/hpe web viewpoint
- version/hpe web viewpoint/06.03
- version/hpe web viewpoint/06.23.01
- version/hpe web viewpoint/15.08.00
- version/hpe web viewpoint/19.08.00
- version/hpe web viewpoint/t0320h01\^abw
- version/hpe web viewpoint/t0320h01\^acc
- version/hpe web viewpoint/t0952h01\^aaq
- version/hpe web viewpoint/t0952h01\^aaw
- version/hpe web viewpoint/t0952l01\^aar
- version/hpe web viewpoint/t0952l01\^aax
- version/hpe web viewpoint/t0986h01\^aac
- version/hpe web viewpoint/t0986h01\^aai
- version/hpe web viewpoint/t0986l01\^aad
- version/hpe web viewpoint/t0986l01\^aaj
- version/hpe web viewpoint/15.02.00
- version/hpe web viewpoint/15.02.01
- version/hpe web viewpoint/t0320l01\^aby
- version/hpe web viewpoint/t0320l01\^acd
- canonical/hp nonstop