Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-73742

Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) Fabric Composer

Default version status: affected

  • 7.0.0 to ≤ 7.3.3affected

References