CVE-2021-26579

MEDIUM

HPE Unified Data Management - Use of Hard-coded Cryptographic Key

Title source: llm

Description

A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us

Scores

CVSS v3 5.5

EPSS 0.0005

EPSS Percentile 14.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-798

Status published

Products (2)

hpe/unified_data_management 1.2009.0

hpe/unified_data_management 1.2101.0

Published Mar 30, 2021

Tracked Since Feb 18, 2026