CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Privilege Management
Summary: potential security vulnerabilities have been identified with hpe nimble storage systems in multi array group configurations. the vulnerabilities could be remotely exploited by an attacker to gain elevated privileges or disclose information the array. affected products and versions include: nimble storage hybrid flash arrays - 5.1.2.0 and older, 5.0.7.0 and older, 4.5.4.0 and older, and 3.9.1.0 and older nimble storage all flash arrays - 5.1.2.0 and older, 5.0.7.0 and older, 4.5.4.0 and older, and 3.9.1.0 and older nimble storage secondary flash arrays - 5.1.2.0 and older, 5.0.7.0 and older, 4.5.4.0 and older, and 3.9.1.0 and older
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-07
Last Modified Date: 2019-11-07