CVE-2018-7069 Auth bypass in HPE CentralView Fraud Risk Management
Remote unauthenticated attackers can access files in HPE CentralView Fraud Risk Management due to improper authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7069?
CVE-2018-7069 is a high-severity authentication bypass vulnerability in Hewlett Packard Enterprise HPE CentralView Fraud Risk Management, published on 6 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.
Weakness: CWE-287
Which versions are affected by CVE-2018-7069?
It affects 1 product.
Products include Hp Centralview Fraud Risk Management.
How do I fix CVE-2018-7069?
No fix has been published for CVE-2018-7069 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-7069 being exploited?
There is no known exploitation of CVE-2018-7069 in the wild and no public exploit code.
Other vulnerabilities in Hewlett Packard Enterprise HPE CentralView Fraud Risk Management
Sources
Also known as GHSA-2395-q2xh-c2x6.