Admins should protect their HPE servers against malicious code attacks with a workaround.

(Image: VideoFlow / Shutterstock.com)

A security vulnerability in the Hewlett Packard Enterprise Systems Insight Manager (SIM) administration tool for Linux and Windows puts servers at risk. If an attack succeeds, attackers can execute malicious code. Security patches are not yet available.

HPE recommends a Follow a workaround to secure your servers against such attacks. The steps are only valid for the Windows version.

Remote Code Execution The as ” critical “classified gap (CVE – 2020 – 7200) applies to SIM version 7.6. Attack should be possible from a distance. HPE will issue an alert on how admins can remove the federated search and federated CMS configuration features that allow attacks.

According to HPE, security updates are in development. When these will come is still unclear.

(des)

7200