ZDI-CAN-25791: ZDI-25-614: Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-37107.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25791?
The severity of ZDI-CAN-25791 is rated at 7.3 on the CVSS scale, indicating a high risk level.
How does ZDI-CAN-25791 affect Hewlett Packard Enterprise AutoPass License Server?
ZDI-CAN-25791 allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server.
What are the potential impacts of exploiting ZDI-CAN-25791?
Exploiting ZDI-CAN-25791 could allow unauthorized access to sensitive functionalities without authentication.
How can I mitigate the risks associated with ZDI-CAN-25791?
To mitigate the risks associated with ZDI-CAN-25791, apply the recommended patches provided by Hewlett Packard Enterprise.
Is authentication required to exploit ZDI-CAN-25791?
No, authentication is not required to exploit the ZDI-CAN-25791 vulnerability.