First published: Tue Apr 12 2022(Updated: )
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE Superdome Flex Server Version 3.50.58 or later, HPE Superdome Flex 280 Server Version 1.20.204 or later.
Credit: security-alert@hpe.com security-alert@hpe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Hpe Superdome Flex Server Firmware | <3.50.58 | |
HPE Superdome Flex Server | ||
Hpe Superdome Flex 280 Server Firmware | <1.20.204 | |
HPE Superdome Flex 280 Server |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-23702 is a potential security vulnerability in HPE Superdome Flex and Superdome Flex 280 Servers that could allow an user with Administrator access to escalate their privilege.
The CVE-2022-23702 vulnerability can be locally exploited by a user with Administrator access.
CVE-2022-23702 has a severity rating of medium (6.7).
The affected software for CVE-2022-23702 is HPE Superdome Flex and Superdome Flex 280 Server firmware versions up to 3.50.58 and 1.20.204 respectively.
The CVE-2022-23702 vulnerability can be resolved by applying the latest firmware update provided by HPE Superdome.