HPE StoreOnce Software Directory Traversal Information Disclosure Vulnerability

A directory traversal vulnerability allowing information disclosure exists in HPE StoreOnce Software VSA versions prior to 4.3.11. This vulnerability could be exploited to access files and directories outside the intended scope, potentially leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to HPE StoreOnce Software Version 4.3.11 or later to address this vulnerability. The software is available for download from the Hewlett Packard Enterprise Support Center.