HPE Telco Network Function Virtual Orchestrator Storage Policy Vulnerability Allowing Unauthorized Access to Sensitive Information

A vulnerability exists in the storage policy of certain authentication keys in HPE Telco Network Function Virtual Orchestrator versions 7.3.0 and prior. This vulnerability could be exploited to allow unauthorized parties to access sensitive system information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive system information.

Remediation

Users can upgrade to HPE Telco Network Function Virtualization Orchestrator version 7.4.0 or later to address this vulnerability. After upgrading, it is recommended to rotate the affected authentication and encryption keys. The updated software can be downloaded from the HPE My Enterprise License portal.