Home

CVE-2020-7198

Description

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.446

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-7198 are affected in oneview 5.20.01NCM
Vulnerabilities CVE-2020-7198 are affected in synergy_composer 5.20.01NCM
Vulnerabilities CVE-2020-7198 are affected in synergy_composer_2 5.20.01NCM
CVE-2020-7198NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234