Description
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | HP OneView; HPE Synergy Composer; HPE Synergy Composer 2 | 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 | — |