CVE-2025-37093

An authentication bypass vulnerability exists in HPE StoreOnce Software

Critical · published June 2, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

🚨 An alarming authentication bypass vulnerability is lurking in HPE StoreOnce Software—letting attackers waltz right in without a password! 🔥 Think of it like a hotel front desk that hands out room keys to anyone who asks, no ID required—it’s an open invitation for mischief! If exploited, a malicious actor could gain unfettered access to sensitive data stored within the system, potentially leading to data theft, corruption, or even complete system takeover. This could be absolutely devastating for businesses relying on this storage solution! 🔥

Put simply

Think of it like a hotel front desk that hands out room keys to anyone who asks, no ID required—it’s an open invitation for mischief! This vulnerability arises from a flaw in the authentication process, allowing unauthorized users to bypass security checks and gain access to restricted resources without proper credentials.

What to do

If exploited, a malicious actor could gain unfettered access to sensitive data stored within the system, potentially leading to data theft, corruption, or even complete system takeover. This could be absolutely devastating for businesses relying on this storage solution! 🔥 Immediately apply the latest patches provided by HPE to resolve this issue. Audit your systems for any vulnerable instances, and ensure that access controls are strictly enforced. Don't wait—secure your data now! 🛡️ You've got this! Implement these changes, and you'll be one step closer to securing your environment. 💪

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Published
2025-06-02T13:56Z
EPSS history
Timeline
  • 02 JUN 13:56Z
    An authentication bypass vulnerability exists in HPE StoreOnce Software
    cvelistv5