CVE-2019-5396

CriticalCVSS 9.4/10Last modified Jun 17, 2026

Description

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.

Metrics

CVSS 3.0 9.4/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)HPE 3PAR Service Processorprior to 5.0.5.1

References

Timeline

Published
Aug 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-53979.4A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-53985.4A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-53999.4A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-54006.3A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.CVE-2019-54014.8A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by settingCVE-2019-54029.4A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5CVE-2019-54034.8A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): priCVE-2019-54048.8A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1CVE-2019-54057.3A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5CVE-2019-54067.2A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.CVE-2019-54076.3A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3CVE-2019-54086.5Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage syste
CVE-2019-5396: Critical severity, CVSS 9.4 | Vulnix