CVE-2019-12002

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage	HPE MSA 1040 SAN Storage GL225P001 and earlier; HPE MSA 2040 SAN Storage GL225P001 and earlier; HPE MSA 2042 SAN Storage GL225P001 and earlier; HPE MSA 1050 SAN Storage VE270R001-01 and earlier; HPE MSA 2050 SAN Storage VL270R001-01 and earlier; HPE MSA 2052 SAN Storage VL270R001-01 and earlier

References

Timeline

Published: Apr 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-12017.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who CVE-2019-120179.8A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handle CVE-2019-12024.4An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who succes CVE-2019-12035.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques CVE-2019-12044.3An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validatio CVE-2019-120417.5lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.CVE-2019-120429.8Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in CVE-2019-120436.1In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as dem CVE-2019-120447.5A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x CVE-2019-120469.8LemonLDAP::NG -2.0.3 has Incorrect Access Control.CVE-2019-120476.1Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by CVE-2019-12059.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who