VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 7, 2019· Updated Jun 17, 2026

CVE-2019-11996

CVE-2019-11996

Description

Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0.

Affected products

2
  • HPE/NimbleOS
    cpe:2.3:o:hpe:nimbleos:*:*:*:*:*:*:*:*
    Range: >=3.1.0.0,<=3.9.1.0
  • HPE/Nimble Storagellm-fuzzy
    Range: before 3.9.2.0, 4.5.5.0, 5.0.8.0, 5.1.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.