Auth bypass in Hp Edgeline_infrastructure_manager
CVE-2021-29203
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote a…
Vulnerability class: Broken Authentication
EPSS: 0.683 (99.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hp Edgeline_infrastructure_manager
- N/a Hpe Edgeline Infrastructure Management Software — versions Prior to version 1.22
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-alert@hpe.com (Exploit, Third Party Advisory, x_refsource_MISC)
- security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-29203?
- CVE-2021-29203 is a critical-severity vulnerability in Hp Edgeline_infrastructure_manager, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2021-05-06.
- How severe is CVE-2021-29203?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2021-29203 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.