HPE StorageWorks XP7 Automation Director Authentication Bypass Vulnerability

CVE-2018-7108 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.

Learn more about our User Device Pen Test.