ZDI-26-134: Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-23600.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-134?
The severity of ZDI-26-134 is considered high due to the potential for remote authentication bypass.
How do I fix ZDI-26-134?
To fix ZDI-26-134, ensure that you apply the latest security patches provided by Hewlett Packard Enterprise for AutoPass License Server.
What systems are affected by ZDI-26-134?
ZDI-26-134 affects installations of Hewlett Packard Enterprise AutoPass License Server.
What type of vulnerability is ZDI-26-134?
ZDI-26-134 is an authentication bypass vulnerability that does not require authentication to exploit.
Can ZDI-26-134 be exploited remotely?
Yes, ZDI-26-134 can be exploited remotely, allowing attackers to bypass authentication.