CVE-2021-29203

Summary

CVE	CVE-2021-29203
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-05-06 21:15:00 UTC
Updated	2022-07-12 17:42:00 UTC
Description	A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager.

Risk And Classification

Problem Types: CWE-306

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Hp	Edgeline Infrastructure Manager	All	All	All	All

References

Reference	Source	Link	Tags
HPE Edgeline Infrastructure Manager v1.21 Authentication Bypass - Research Advisory \| Tenable®	MISC	www.tenable.com
Document Display \| HPE Support Center	MISC	support.hpe.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

730080 HPE Edgeline Infrastructure Manager Authentication Bypass Vulnerability (HPESBGN04124)