CVE-2024-54009 MEDIUM

CVE-2024-54009

Vendor Hewlett Packard Enterprise (Hpe)
Product HPE Alletra Storage MP B10000
Weakness CWE-200 · Info exposure
Published December 19, 2024
Last update December 20, 2024

CVSS base score

4.0/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited to allow disclosure of information.

Key dates

02Disclosure timeline

December 19, 2024 CVE published
December 20, 2024 Record updated