CVE-2024-22437
HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege
- State
- Published
- Severity
- 7.3 High
- Published
- Apr 15, 2024
- Updated
- Aug 1, 2024
- Reserved
- Jan 10, 2024
Description
A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | hpe |
Weaknesses
- CWE-428 Unquoted Search Path or Element
Affected Products
| Product | Versions |
|---|---|
HPE MSA SAN Storage VSS Provider and CAPI Proxy SoftwareHewlett Packard Enterprise |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.