Security Advisory

CVE-2013-2352

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-07-10 22:00:00
Last updated 2024-09-16 16:37:31
Assigner hp
CVSS score not scored
State PUBLISHED

Description

LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.