CVE-2019-11991

HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security-alert@hpe.com

Published

2019-07-09

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Hpe 3par Service Processors (Hewlett Packard Enterprise)
• 3par Service Processor Firmware (Hp)

References

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us