Database/Control plane, storage & DevOps
HPE Insight Remote Support (path traversal): Unauthenticated path traversal disclosing files from the IRS server
CVE-2025-37098Control plane, storage & DevOpscurated
Impact
Unauthenticated path traversal disclosing files from the IRS server - including configuration holding device credentials.
Who can reach it
Unauthenticated network access below v7.15.0.646.
What to do
Upgrade Insight RS to 7.15.0.646 and rotate any device credentials stored in its configuration.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.