[security bulletin] HPESBGN03727 rev.1 - HPE Business Process Monitor, Remote Unauthorized Access to Data

LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEEyNTYKCk5v
dGU6IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIGZvbGxvd2luZyBkb2N1bWVudCBp
cyBhdmFpbGFibGUgaGVyZToNCmh0dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNj
L2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1lbXJfbmEtaHBlc2JnbjAzNzI3ZW5fdXMN
Cg0KU1VQUE9SVCBDT01NVU5JQ0FUSU9OIC0gU0VDVVJJVFkgQlVMTEVUSU4NCg0KRG9j
dW1lbnQgSUQ6IGhwZXNiZ24wMzcyN2VuX3VzDQpWZXJzaW9uOiAxDQoNCkhQRVNCR04w
MzcyNyByZXYuMSAtIEhQRSBCdXNpbmVzcyBQcm9jZXNzIE1vbml0b3IsIFJlbW90ZSBV
bmF1dGhvcml6ZWQgQWNjZXNzDQp0byBEYXRhDQoNCk5PVElDRTogVGhlIGluZm9ybWF0
aW9uIGluIHRoaXMgU2VjdXJpdHkgQnVsbGV0aW4gc2hvdWxkIGJlIGFjdGVkIHVwb24g
YXMNCnNvb24gYXMgcG9zc2libGUuDQoNClJlbGVhc2UgRGF0ZTogMjAxNy0wNC0wNA0K
TGFzdCBVcGRhdGVkOiAyMDE3LTA0LTA0DQoNClBvdGVudGlhbCBTZWN1cml0eSBJbXBh
Y3Q6IFJlbW90ZTogVW5hdXRob3JpemVkIEFjY2VzcyB0byBEYXRhDQoNClNvdXJjZTog
SGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2UsIFByb2R1Y3QgU2VjdXJpdHkgUmVzcG9u
c2UgVGVhbQ0KDQpWVUxORVJBQklMSVRZIFNVTU1BUlkNCkEgcG90ZW50aWFsIHNlY3Vy
aXR5IHZ1bG5lcmFiaWxpdHkgaGFzIGJlZW4gaWRlbnRpZmllZCBpbiB0aGUgSFBFIEJ1
c2luZXNzDQpQcm9jZXNzIE1vbml0b3IuIFRoaXMgdnVsbmVyYWJpbGl0eSBjb3VsZCBi
ZSByZW1vdGVseSBleHBsb2l0ZWQgdG8gYWxsb3cNClVuYXV0aG9yaXplZCBBY2Nlc3Mg
dG8gRGF0YS4NCg0KUmVmZXJlbmNlczoNCg0KICAtIENWRS0yMDE3LTU4MDEgLSBSZW1v
dGUgVW5hdXRob3JpemVkIEFjY2VzcyB0byBEYXRhDQoNClNVUFBPUlRFRCBTT0ZUV0FS
RSBWRVJTSU9OUyo6IE9OTFkgaW1wYWN0ZWQgdmVyc2lvbnMgYXJlIGxpc3RlZC4NCg0K
ICAtIEhQIEJ1c2luZXNzIFByb2Nlc3MgTW9uaXRvciBVbHRpbWF0ZSBFZGl0aW9uIFNv
ZnR3YXJlICAtIHYwOS4yeCwgdjA5LjMwDQoNCkJBQ0tHUk9VTkQNCg0KICBDVlNTIEJh
c2UgTWV0cmljcw0KICA9PT09PT09PT09PT09PT09PQ0KICBSZWZlcmVuY2UsIENWU1Mg
VjMgU2NvcmUvVmVjdG9yLCBDVlNTIFYyIFNjb3JlL1ZlY3Rvcg0KDQogICAgQ1ZFLTIw
MTctNTgwMQ0KICAgICAgNS4zIENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOk4vUzpV
L0M6TC9JOk4vQTpODQogICAgICA1LjAgKEFWOk4vQUM6TC9BdTpOL0M6UC9JOk4vQTpO
KQ0KDQogICAgSW5mb3JtYXRpb24gb24gQ1ZTUyBpcyBkb2N1bWVudGVkIGluDQogICAg
SFBFIEN1c3RvbWVyIE5vdGljZSBIUFNOLTIwMDgtMDAyIGhlcmU6DQoNCmh0dHBzOi8v
aDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1l
bXJfbmEtYzAxMzQ1NDk5DQoNClJFU09MVVRJT04NCg0KSFBFIGhhcyBtYWRlIHRoZSBm
b2xsb3dpbmcgbWl0aWdhdGlvbiBpbmZvcm1hdGlvbiBhdmFpbGFibGUgdG8gcmVzb2x2
ZSB0aGUNCnZ1bG5lcmFiaWxpdHkgZm9yIHRoZSBpbXBhY3RlZCB2ZXJzaW9ucyBvZiBI
UEUgQnVzaW5lc3MgUHJvY2VzcyBNb25pdG9yOg0KDQo8aHR0cHM6Ly9zb2Z0d2FyZXN1
cHBvcnQuaHBlLmNvbS9ncm91cC9zb2Z0d2FyZXN1cHBvcnQvc2VhcmNoLXJlc3VsdC8t
L2ZhY2V0cw0KYXJjaC9kb2N1bWVudC9LTTAyNzA4MzM0Pg0KDQpISVNUT1JZDQpWZXJz
aW9uOjEgKHJldi4xKSAtIDQgQXByaWwgMjAxNyBJbml0aWFsIHJlbGVhc2UNCg0KVGhp
cmQgUGFydHkgU2VjdXJpdHkgUGF0Y2hlczogVGhpcmQgcGFydHkgc2VjdXJpdHkgcGF0
Y2hlcyB0aGF0IGFyZSB0byBiZQ0KaW5zdGFsbGVkIG9uIHN5c3RlbXMgcnVubmluZyBI
ZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSAoSFBFKSBzb2Z0d2FyZQ0KcHJvZHVjdHMg
c2hvdWxkIGJlIGFwcGxpZWQgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBjdXN0b21lcidz
IHBhdGNoIG1hbmFnZW1lbnQNCnBvbGljeS4NCg0KU3VwcG9ydDogRm9yIGlzc3VlcyBh
Ym91dCBpbXBsZW1lbnRpbmcgdGhlIHJlY29tbWVuZGF0aW9ucyBvZiB0aGlzIFNlY3Vy
aXR5DQpCdWxsZXRpbiwgY29udGFjdCBub3JtYWwgSFBFIFNlcnZpY2VzIHN1cHBvcnQg
Y2hhbm5lbC4gRm9yIG90aGVyIGlzc3VlcyBhYm91dA0KdGhlIGNvbnRlbnQgb2YgdGhp
cyBTZWN1cml0eSBCdWxsZXRpbiwgc2VuZCBlLW1haWwgdG8gc2VjdXJpdHktYWxlcnRA
aHBlLmNvbS4NCg0KUmVwb3J0OiBUbyByZXBvcnQgYSBwb3RlbnRpYWwgc2VjdXJpdHkg
dnVsbmVyYWJpbGl0eSBmb3IgYW55IEhQRSBzdXBwb3J0ZWQNCnByb2R1Y3Q6DQogIFdl
YiBmb3JtOiBodHRwczovL3d3dy5ocGUuY29tL2luZm8vcmVwb3J0LXNlY3VyaXR5LXZ1
bG5lcmFiaWxpdHkNCiAgRW1haWw6IHNlY3VyaXR5LWFsZXJ0QGhwZS5jb20NCg0KU3Vi
c2NyaWJlOiBUbyBpbml0aWF0ZSBhIHN1YnNjcmlwdGlvbiB0byByZWNlaXZlIGZ1dHVy
ZSBIUEUgU2VjdXJpdHkgQnVsbGV0aW4NCmFsZXJ0cyB2aWEgRW1haWw6IGh0dHA6Ly93
d3cuaHBlLmNvbS9zdXBwb3J0L1N1YnNjcmliZXJfQ2hvaWNlDQoNClNlY3VyaXR5IEJ1
bGxldGluIEFyY2hpdmU6IEEgbGlzdCBvZiByZWNlbnRseSByZWxlYXNlZCBTZWN1cml0
eSBCdWxsZXRpbnMgaXMNCmF2YWlsYWJsZSBoZXJlOiBodHRwOi8vd3d3LmhwZS5jb20v
c3VwcG9ydC9TZWN1cml0eV9CdWxsZXRpbl9BcmNoaXZlDQoNClNvZnR3YXJlIFByb2R1
Y3QgQ2F0ZWdvcnk6IFRoZSBTb2Z0d2FyZSBQcm9kdWN0IENhdGVnb3J5IGlzIHJlcHJl
c2VudGVkIGluDQp0aGUgdGl0bGUgYnkgdGhlIHR3byBjaGFyYWN0ZXJzIGZvbGxvd2lu
ZyBIUFNCLg0KDQozQyA9IDNDT00NCjNQID0gM3JkIFBhcnR5IFNvZnR3YXJlDQpHTiA9
IEhQRSBHZW5lcmFsIFNvZnR3YXJlDQpIRiA9IEhQRSBIYXJkd2FyZSBhbmQgRmlybXdh
cmUNCk1VID0gTXVsdGktUGxhdGZvcm0gU29mdHdhcmUNCk5TID0gTm9uU3RvcCBTZXJ2
ZXJzDQpPViA9IE9wZW5WTVMNClBWID0gUHJvQ3VydmUNClNUID0gU3RvcmFnZSBTb2Z0
d2FyZQ0KVVggPSBIUC1VWA0KDQpDb3B5cmlnaHQgMjAxNiBIZXdsZXR0IFBhY2thcmQg
RW50ZXJwcmlzZQ0KDQpIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBzaGFsbCBub3Qg
YmUgbGlhYmxlIGZvciB0ZWNobmljYWwgb3IgZWRpdG9yaWFsDQplcnJvcnMgb3Igb21p
c3Npb25zIGNvbnRhaW5lZCBoZXJlaW4uIFRoZSBpbmZvcm1hdGlvbiBwcm92aWRlZCBp
cyBwcm92aWRlZA0KImFzIGlzIiB3aXRob3V0IHdhcnJhbnR5IG9mIGFueSBraW5kLiBU
byB0aGUgZXh0ZW50IHBlcm1pdHRlZCBieSBsYXcsIG5laXRoZXINCkhQIG9yIGl0cyBh
ZmZpbGlhdGVzLCBzdWJjb250cmFjdG9ycyBvciBzdXBwbGllcnMgd2lsbCBiZSBsaWFi
bGUgZm9yDQppbmNpZGVudGFsLHNwZWNpYWwgb3IgY29uc2VxdWVudGlhbCBkYW1hZ2Vz
IGluY2x1ZGluZyBkb3dudGltZSBjb3N0OyBsb3N0DQpwcm9maXRzOyBkYW1hZ2VzIHJl
bGF0aW5nIHRvIHRoZSBwcm9jdXJlbWVudCBvZiBzdWJzdGl0dXRlIHByb2R1Y3RzIG9y
DQpzZXJ2aWNlczsgb3IgZGFtYWdlcyBmb3IgbG9zcyBvZiBkYXRhLCBvciBzb2Z0d2Fy
ZSByZXN0b3JhdGlvbi4gVGhlDQppbmZvcm1hdGlvbiBpbiB0aGlzIGRvY3VtZW50IGlz
IHN1YmplY3QgdG8gY2hhbmdlIHdpdGhvdXQgbm90aWNlLiBIZXdsZXR0DQpQYWNrYXJk
IEVudGVycHJpc2UgYW5kIHRoZSBuYW1lcyBvZiBIZXdsZXR0IFBhY2thcmQgRW50ZXJw
cmlzZSBwcm9kdWN0cw0KcmVmZXJlbmNlZCBoZXJlaW4gYXJlIHRyYWRlbWFya3Mgb2Yg
SGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2UgaW4gdGhlIFVuaXRlZA0KU3RhdGVzIGFu
ZCBvdGhlciBjb3VudHJpZXMuIE90aGVyIHByb2R1Y3QgYW5kIGNvbXBhbnkgbmFtZXMg
bWVudGlvbmVkIGhlcmVpbg0KbWF5IGJlIHRyYWRlbWFya3Mgb2YgdGhlaXIgcmVzcGVj
dGl2ZSBvd25lcnMuDQotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0tLQpWZXJzaW9u
OiBHbnVQRyB2MQoKaVFFY0JBRUJDQUFHQlFKWTQvQUhBQW9KRUxYaEF4dDdTWmFpOUVj
SUFJd1c4WGhjUmFma2hDdnZtcHFZRlZrZgp4NHJUSUQ2ZksrOWZUbG5ETDk1MlRmbzlP
NHl2ZWM5UWtNZWxud3FwaTJTNTZwd25xbnpjZDVwSzNRV2tuUzYwClk0YVRERGdyK2U3
NjJVT0E1YzVHZGQ3K0tTZ2FIOVhQS0NxdEttQUhVbUwzYndxeTR0OFlIelNINm02RVZ1
ZkIKM3VqT00zVGd0ZTBQMVcyWE81cnZEeHA0Z0dXYXNSMFBGZ1VSaG4zb2Rhd3AyaEM5
TzhXVitnREU2M0EreDMrYwprZDVxRTI5cFJHb1ZnSUVtVzJoMi9kRUtpcEw2L0lDamtl
cXl2bzcrekFvMVpKWnBObmRaSEZJV3oxWG5FNTJrCjcyWE44RjZDeDE5U1RHSCtmUVk0
aFFqZXBJcHZWREdzWE9UWCtMaFhBSFVydG9zUWFKczY4eTYvVG55dEhkYz0KPURBTEoK
LS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0tCg==