Title

HP Smart Storage Administrator Remote Code Execution Vulnerability (Cat I impact)

Discussion

Hewlett Packard Enterprise has released a security bulletin addressing a vulnerability in Smart Storage Administrator (HPE SSA). HPE SSA provides full-range support for standard and advanced configuration tasks. To exploit this vulnerability, an attacker would submit a malicious request to an affected application. If successfully exploited, the attacker would execute arbitrary code in the context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-73895

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.