Database/Control plane, storage & DevOps

HPE StoreOnce (directory traversal information disclosure): Unauthenticated directory traversal disclosing files

CVE-2025-37095Control plane, storage & DevOpscurated

Impact

Unauthenticated directory traversal disclosing files from the backup appliance.

Who can reach it

Unauthenticated network access.

What to do

Upgrade StoreOnce per HPESBST04847.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.