CVE-2024-54009

Published: Dec 19, 2024Modified: Jun 17, 2026Deferred

4.0

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Exploitability: 0.3 / Impact: 3.6

Source: security-alert@hpe.com (Secondary)

Description

Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited to allow disclosure of information.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04764en_us&docLocale=en_US

Source: security-alert@hpe.com

Timeline

No history available yet.