The vulnerability is an authentication bypass flaw that allows attackers to gain access to HPE Intelligent Management Center without providing valid credentials. By circumventing the standard authentication process, an attacker can assume the authority normally granted to an authenticated user. This weakness compromises the confidentiality, integrity and availability of the managed environment.

Hewlett Packard Enterprise’s HPE Intelligent Management Center is affected in all releases prior to version 7.3 E0713. Any deployment using those versions is vulnerable and requires remediation.

The CVSS score of 9.1 indicates a critical severity. The EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog. The advisory does not disclose the exact attack vector; however, authentication bypass typically involves interacting with the iMC’s authentication mechanism, potentially from remote or local channels. Once the bypass is achieved, unauthorized access to the system is possible.