CVE-2023-28084

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

VendorProductVersions
Hewlett Packard EnterpriseHPE OneView<= 8.2; < 6.60.04
Hewlett Packard EnterpriseHPE OneView Global Dashboard< 2.72

References

Timeline

Published
Apr 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280855.5An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentialsCVE-2023-280865.5An HPE OneView appliance dump may expose proxy credential settingsCVE-2023-280875.5An HPE OneView appliance dump may expose OneView user accountsCVE-2023-280887.8An HPE OneView appliance dump may expose SAN switch administrative credentialsCVE-2023-280897.1An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect ModulesCVE-2023-28099.8Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to eCVE-2023-280905.5An HPE OneView appliance dump may expose SNMPv3 read credentialsCVE-2023-280915.5HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dumpCVE-2023-280926.8A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system beinCVE-2023-280936.5A user with a compromised configuration can start an unsigned binary as a service.CVE-2023-280949.8Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credenCVE-2023-280957.5OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in `msg_tran
CVE-2023-28084: Medium severity, CVSS 5.5 | Vulnix