CVEvulnerability

CVE-2021-22267

5.9 MEDIUM Published 2021-02-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-294

Description

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H).

Affected configurations

• hpe web viewpoint (>= 06.03 <= 06.23.01) • hpe web viewpoint (>= 15.08.00 <= 19.08.00) • hpe web viewpoint (>= t0320h01\^abw <= t0320h01\^acc) • hpe web viewpoint (>= t0952h01\^aaq <= t0952h01\^aaw) • hpe web viewpoint (>= t0952l01\^aar <= t0952l01\^aax) • hpe web viewpoint (>= t0986h01\^aac <= t0986h01\^aai) • hpe web viewpoint (>= t0986l01\^aad <= t0986l01\^aaj) • hpe web viewpoint 15.02.00 • hpe web viewpoint 15.02.01 • hpe web viewpoint t0320l01\^aby • hpe web viewpoint t0320l01\^acd

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References