First published: Tue Apr 25 2023(Updated: )
An HPE OneView appliance dump may expose OneView user accounts
Credit: security-alert@hpe.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP OneView | <6.60.04 | |
HP OneView | <8.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-28087 is a vulnerability in HPE OneView appliance that can expose OneView user accounts.
CVE-2023-28087 affects HPE OneView appliances with versions up to 6.60.04 and 8.2, potentially exposing user accounts.
CVE-2023-28087 has a severity rating of medium, with a score of 5.5.
To verify if your HPE OneView appliance is vulnerable to CVE-2023-28087, check the version of your appliance and ensure it is within the affected versions.
To mitigate the CVE-2023-28087 vulnerability in HPE OneView, update your appliance to a version that is not affected by the vulnerability.