CVEvulnerability

CVE-2022-37930

5.5 MEDIUM Published 2022-12-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200

Description

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.

Affected configurations

• hpe sf100 firmware (< 5.2.1.900) • hpe sf100 firmware 5.3.0.0 • hpe sf300 firmware (< 5.2.1.900) • hpe sf300 firmware 5.3.0.0 • hpe hf60c firmware (< 5.2.1.900) • hpe hf60c firmware 5.3.0.0 • hpe hf40c firmware (< 5.2.1.900) • hpe hf40c firmware 5.3.0.0 • hpe hf20 firmware (< 5.2.1.900) • hpe hf20 firmware 5.3.0.0 • hpe hf40 firmware (< 5.2.1.900) • hpe hf40 firmware 5.3.0.0 • hpe hf60 firmware (< 5.2.1.900) • hpe hf60 firmware 5.3.0.0 • hpe hf20h firmware (< 5.2.1.900) • hpe hf20h firmware 5.3.0.0 • hpe hf20c firmware (< 5.2.1.900) • hpe hf20c firmware 5.3.0.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References