high8.8
CVE-2020-7198
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer.
Impact
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Oneview | Versions 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 |
| Hp | Synergy Composer | Versions 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 |
| Hp | Synergy Composer 2 | Versions 5.0, 5.00.01, 5.00.02, 5.2, 5.3, 5.4 |