CVE-2020-7199 Auth bypass in HPE Edgeline Infrastructure Management Software
Remote attackers can bypass authentication to execute arbitrary commands, gain privileged access, cause denial of service, and modify configuration in HPE Edgeline Infrastructure Manager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7199?
CVE-2020-7199 is a critical authentication bypass vulnerability in HPE Edgeline Infrastructure Management Software, published on 2 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration.
Weakness: CWE-287
Which versions are affected by CVE-2020-7199?
It affects 1 product.
Products include Hp Edgeline Infrastructure Manager.
How do I fix CVE-2020-7199?
No fix has been published for CVE-2020-7199 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-7199 being exploited?
There is no known exploitation of CVE-2020-7199 in the wild and no public exploit code.
Other vulnerabilities in HPE Edgeline Infrastructure Management Software
Sources
Also known as GHSA-5ch9-xc8v-9jw8.