Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host.

A critical vulnerability has been identified in the API of HPE Networking Fabric Composer that allows unauthenticated remote attackers to bypass existing authentication controls. Successful exploitation can grant an attacker administrative privileges, leading to complete compromise of the HPE Networking Fabric Composer host. The vulnerability requires no authentication, making it particularly dangerous as it can be exploited remotely without credentials. The impact is severe, potentially allowing full administrative control over affected systems. HPE has published a security bulletin with remediation guidance. Organizations using HPE Networking Fabric Composer should apply patches immediately given the critical nature of the authentication bypass.