CVE-2023-28088: High severity hpe oneview vulnerability
Published Apr 25, 2023
·Updated
An HPE OneView appliance dump may expose SAN switch administrative credentials
Affected Software
2 affected components
HP OneView<6.60.04
HP OneView<8.2
Event History
Apr 25, 2023
CVE Published
07:15 PM
Frequently Asked Questions
1
What is CVE-2023-28088?
CVE-2023-28088 is a vulnerability that allows an HPE OneView appliance dump to expose SAN switch administrative credentials.
2
What is the severity of CVE-2023-28088?
The severity of CVE-2023-28088 is high with a CVSS score of 7.8.
3
Which software versions are affected by CVE-2023-28088?
Versions of HP OneView up to and excluding 6.60.04 LTS and versions up to and excluding 8.2 are affected by CVE-2023-28088.
4
How can I fix CVE-2023-28088?
To fix CVE-2023-28088, update your HP OneView appliance to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2023-28088?
You can find more information about CVE-2023-28088 at the following reference: [link](https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us).