CVE-2018-7108

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.

• CWE-287

• http://www.securitytracker.com/id/1041696Third Party Advisory, VDB Entry
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03879en_usVendor Advisory
• http://www.securitytracker.com/id/1041696Third Party Advisory, VDB Entry
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03879en_usVendor Advisory

Published

Sep 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7102A security vulnerability in HPE Intelligent Management Cente…
• CVE-2018-7103A Remote Code Execution vulnerability was identified in HPE …
• CVE-2018-7104A Remote Code Execution vulnerability was identified in HPE …
• CVE-2018-7105A security vulnerability in HPE Integrated Lights-Out 5 (iLO…
• CVE-2018-7106Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-7107A potential security vulnerability has been identified in HP…
• CVE-2018-7109HPE has addressed a remote arbitrary file modification vulne…
• CVE-2018-7110A remote unauthorized disclosure of information vulnerabilit…
• CVE-2018-7111A remote unauthorized access vulnerability was identified in…
• CVE-2018-7112The HPE-provided Windows firmware installer for certain Gen9…
• CVE-2018-7113A security vulnerability in HPE Integrated Lights-Out 5 (iLO…
• CVE-2018-7114HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.…