Description
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a HP OneView; HPE Synergy Composer; HPE Synergy Composer 2
5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4affected