Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer

Summary

An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated local attacker to create or overwrite arbitrary files on the affected system with elevated privileges.

Remediation

1. Inventory every Hewlett Packard Enterprise (HPE) Fabric Composer deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US