Auth bypass in Hp Edgeline_infrastructure_manager
CVE-2020-7199
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading t…
Vulnerability class: Broken Authentication
EPSS: 0.092 (94.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hp Edgeline_infrastructure_manager
- N/a Hpe Edgeline Infrastructure Management Software — versions Prior to 1.21
Weakness classification (CWE)
References
- security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-7199?
- CVE-2020-7199 is a critical-severity vulnerability in Hp Edgeline_infrastructure_manager, classified under Improper Authentication. CVSS score: 9.8/10. Published 2020-12-02.
- How severe is CVE-2020-7199?
- Critical severity. CVSS v3 base score is 9.8 out of 10.