CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.

• CWE-532

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04304en_usMitigation, Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04304en_usMitigation, Vendor Advisory

Published

Aug 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2862Use After Free in GitHub repository vim/vim prior to 9.0.022…7.8
• CVE-2022-28620A remote authentication bypass vulnerability was discovered …9.8
• CVE-2022-28621A remote disclosure of sensitive information vulnerability w…7.5
• CVE-2022-28622A potential security vulnerability has been identified in HP…7.5
• CVE-2022-28623Security vulnerabilities in HPE IceWall SSO 10.0 certd could…9.8
• CVE-2022-28624A potential security vulnerability has been identified in ce…4.8
• CVE-2022-28626A local arbitrary code execution vulnerability was discovere…6.7
• CVE-2022-28627A local arbitrary code execution vulnerability was discovere…8.4
• CVE-2022-28628A local arbitrary code execution vulnerability was discovere…8.4
• CVE-2022-28629A local arbitrary code execution vulnerability was discovere…7.8
• CVE-2022-2863The Migration, Backup, Staging WordPress plugin before 0.9.7…4.9
• CVE-2022-28630A local arbitrary code execution vulnerability was discovere…7.3