HPE StoreOnce Software Directory Traversal Arbitrary File Deletion Vulnerability

A directory traversal vulnerability allowing arbitrary file deletion has been identified in HPE StoreOnce Software, specifically in HPE StoreOnce VSA versions prior to 4.3.11. This vulnerability could be exploited remotely, leading to unauthorized deletion of files on the affected system.

Impact

Exploitation of this vulnerability could result in unauthorized deletion of files on the affected system.

Remediation

Users can upgrade to HPE StoreOnce Software Version 4.3.11 or later to address this vulnerability. The software is available for download from the Hewlett Packard Enterprise Support Center.