[security bulletin] HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities

LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEEyNTYKCk5v
dGU6IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIGZvbGxvd2luZyBkb2N1bWVudCBp
cyBhdmFpbGFibGUgaGVyZToNCmh0dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNj
L2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1lbXJfbmEtaHBlc2JnbjAzNzQwZW5fdXMN
Cg0KU1VQUE9SVCBDT01NVU5JQ0FUSU9OIC0gU0VDVVJJVFkgQlVMTEVUSU4NCg0KRG9j
dW1lbnQgSUQ6IGhwZXNiZ24wMzc0MGVuX3VzDQpWZXJzaW9uOiAxDQoNCkhQRVNCR04w
Mzc0MCByZXYuMSAtIEhQRSBOZXR3b3JrIEF1dG9tYXRpb24sIE11bHRpcGxlIFJlbW90
ZSBWdWxuZXJhYmlsaXRpZXMNCg0KTk9USUNFOiBUaGUgaW5mb3JtYXRpb24gaW4gdGhp
cyBTZWN1cml0eSBCdWxsZXRpbiBzaG91bGQgYmUgYWN0ZWQgdXBvbiBhcw0Kc29vbiBh
cyBwb3NzaWJsZS4NCg0KUmVsZWFzZSBEYXRlOiAyMDE3LTA1LTA0DQpMYXN0IFVwZGF0
ZWQ6IDIwMTctMDUtMDQNCg0KUG90ZW50aWFsIFNlY3VyaXR5IEltcGFjdDogTG9jYWw6
IEF1dGhlbnRpY2F0aW9uIEJ5cGFzczsgUmVtb3RlOiBDb2RlDQpFeGVjdXRpb24sIEVs
ZXZhdGVkIFByaXZpbGVnZXMsIFNRTCBJbmplY3Rpb24NCg0KU291cmNlOiBIZXdsZXR0
IFBhY2thcmQgRW50ZXJwcmlzZSwgUHJvZHVjdCBTZWN1cml0eSBSZXNwb25zZSBUZWFt
DQoNClZVTE5FUkFCSUxJVFkgU1VNTUFSWQ0KUG90ZW50aWFsIHNlY3VyaXR5IHZ1bG5l
cmFiaWxpdGllcyBoYXZlIGJlZW4gaWRlbnRpZmllZCBpbiBIUEUgTmV0d29yaw0KQXV0
b21hdGlvbi4gVGhlIHZ1bG5lcmFiaWxpdGllcyBjb3VsZCBiZSByZW1vdGVseSBleHBs
b2l0ZWQgdG8gYWxsb3cgU1FMDQppbmplY3Rpb24sIGNvZGUgZXhlY3V0aW9uLCBpbmZv
cm1hdGlvbiBkaXNjbG9zdXJlLCBhdXRoZW50aWNhdGlvbiBieXBhc3MsDQplbGV2YXRl
ZCBwcml2aWxlZ2UgZXhlY3V0aW9uLCBhbmQgaW52YWxpZCBzZXNzaW9uIG1hbmFnZW1l
bnQuDQoNClJlZmVyZW5jZXM6DQoNCiAgLSBDVkUtMjAxNy01ODEwIC0gU1FMIGluamVj
dGlvbg0KICAtIENWRS0yMDE3LTU4MTEgLSByZW1vdGUgY29kZSBleGVjdXRpb24NCiAg
LSBDVkUtMjAxNy01ODEyIC0gcmVtb3RlIGluZm9ybWF0aW9uIGRpc2Nsb3N1cmUNCiAg
LSBDVkUtMjAxNy01ODEzIC0gIHJlbW90ZSB1bmF1dGhlbnRpY2F0ZWQgYWNjZXNzDQog
IC0gQ1ZFLTIwMTctNTgxNCAtIHJlbW90ZSBhdXRoZW50aWNhdGlvbiBieXBhc3MsIGVs
ZXZhdGVkIHByaXZpbGVnZQ0KZXhlY3V0aW9uDQoNClNVUFBPUlRFRCBTT0ZUV0FSRSBW
RVJTSU9OUyo6IE9OTFkgaW1wYWN0ZWQgdmVyc2lvbnMgYXJlIGxpc3RlZC4NCg0KICAt
IEhQIE5ldHdvcmsgQXV0b21hdGlvbiBTb2Z0d2FyZSA5LjF4LCA5LjJ4LCAxMC4weCwg
MTAuMXggYW5kIDEwLjJ4DQoNCkJBQ0tHUk9VTkQNCg0KICBDVlNTIEJhc2UgTWV0cmlj
cw0KICA9PT09PT09PT09PT09PT09PQ0KICBSZWZlcmVuY2UsIENWU1MgVjMgU2NvcmUv
VmVjdG9yLCBDVlNTIFYyIFNjb3JlL1ZlY3Rvcg0KDQogICAgQ1ZFLTIwMTctNTgxMA0K
ICAgICAgNy41IENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6SC9JOk4v
QTpODQogICAgICA3LjggKEFWOk4vQUM6TC9BdTpOL0M6Qy9JOk4vQTpOKQ0KDQogICAg
Q1ZFLTIwMTctNTgxMQ0KICAgICAgNy41IENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJ
Ok4vUzpVL0M6SC9JOk4vQTpODQogICAgICA3LjggKEFWOk4vQUM6TC9BdTpOL0M6Qy9J
Ok4vQTpOKQ0KDQogICAgQ1ZFLTIwMTctNTgxMg0KICAgICAgNS4zIENWU1M6My4wL0FW
Ok4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6TC9JOk4vQTpODQogICAgICA1LjAgKEFWOk4v
QUM6TC9BdTpOL0M6UC9JOk4vQTpOKQ0KDQogICAgQ1ZFLTIwMTctNTgxMw0KICAgICAg
NC42IENWU1M6My4wL0FWOk4vQUM6SC9QUjpML1VJOlIvUzpVL0M6TC9JOkwvQTpMDQog
ICAgICA2LjAgKEFWOk4vQUM6TS9BdTpTL0M6UC9JOlAvQTpQKQ0KDQogICAgQ1ZFLTIw
MTctNTgxNA0KICAgICAgOC44IENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOlIvUzpV
L0M6SC9JOkgvQTpIDQogICAgICA5LjAgKEFWOk4vQUM6TC9BdTpTL0M6Qy9JOkMvQTpD
KQ0KDQogICAgSW5mb3JtYXRpb24gb24gQ1ZTUyBpcyBkb2N1bWVudGVkIGluDQogICAg
SFBFIEN1c3RvbWVyIE5vdGljZSBIUFNOLTIwMDgtMDAyIGhlcmU6DQoNCmh0dHBzOi8v
aDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1l
bXJfbmEtYzAxMzQ1NDk5DQoNCkhld2xldHQgUGFja2FyZCBFbnRlcnByaXNlIHRoYW5r
cyB0aGUgZm9sbG93aW5nIGZvciByZXBvcnRpbmcgc2VjdXJpdHkgaXNzdWVzDQp0byBz
ZWN1cml0eS1hbGVydEBocGUuY29tOiAgDQogDQogICogQ1ZFLTIwMTctNTgxMCByZ29k
IHdvcmtpbmcgd2l0aCBUcmVuZCBNaWNybydzIFplcm8gRGF5IEluaXRpYXRpdmUNCiAg
KiBDVkUtMjAxNy01ODExIHJnb2Qgd29ya2luZyB3aXRoIFRyZW5kIE1pY3JvJ3MgWmVy
byBEYXkgSW5pdGlhdGl2ZQ0KICAqIENWRS0yMDE3LTU4MTIgcmdvZCB3b3JraW5nIHdp
dGggVHJlbmQgTWljcm8ncyBaZXJvIERheSBJbml0aWF0aXZlDQogICogQ1ZFLTIwMTct
NTgxNCBDaHJpc3RvcGhlIFNjaGxleXBlbiBvZiBOQVRPIE5DSVJDDQoNClJFU09MVVRJ
T04NCg0KSFBFIGhhcyBtYWRlIHRoZSBmb2xsb3dpbmcgc29mdHdhcmUgdXBkYXRlcyBh
bmQgbWl0aWdhdGlvbiBpbmZvcm1hdGlvbg0KYXZhaWxhYmxlIHRvIHJlc29sdmUgdGhl
IHZ1bG5lcmFiaWxpdGllcyBpbiBIUEUgTmV0d29yayBBdXRvbWF0aW9uOg0KDQpDdXN0
b21lcnMgb24gdmVyc2lvbiA5LjF4IG9yIDkuMnggbmVlZCB0byB1cGdyYWRlIHRvIGEg
cGF0Y2hlZCB2ZXJzaW9uIG9mDQoxMC4weCwgb3IgMTAuMXggb3IgMTAuMnggbm90ZWQg
YmVsb3cNCg0KRm9yIDEwLjB4LCBmaXJzdCBwYXRjaCB0byAxMC4wMC4wMjEsIGFuZCB0
aGVuIGFwcGx5IHRoZSBwYXRjaCAxMC4wMC4wMjI6DQoNCiAgKg0KPGh0dHBzOi8vc29m
dHdhcmVzdXBwb3J0LmhwZS5jb20vZ3JvdXAvc29mdHdhcmVzdXBwb3J0L3NlYXJjaC1y
ZXN1bHQvLS9mYWNldHMNCmFyY2gvZG9jdW1lbnQvTElEL05BXzAwMDQyPg0KDQogICog
UGxlYXNlIGZvbGxvdyBTUEVDSUFMIElOU1RBTEwgSU5TVFJVQ1RJT05TIHNlY3Rpb24g
bWVudGlvbmVkIHVuZGVyDQpJbnN0YWxsYXRpb24gSW5zdHJ1Y3Rpb25zDQoNCiAgKiBJ
biBhZGRpdGlvbiwgZm9sbG93IHRoZSBwcm9jZWR1cmVzIGRlc2NyaWJlZCBpbiB0aGUg
Zm9sbG93aW5nIHNlY3Rpb25zIGluDQp0aGUgTkEgSGFyZGVuaW5nIEd1aWRlIGF2YWls
YWJsZSBhdDoNCjxodHRwczovL3NvZnR3YXJlc3VwcG9ydC5ocGUuY29tL2ttL0tNMDI2
MTU2Nzk+DQoNCiAgICAgLSBFbmFibGUgU2VjdXJlIENvbW11bmljYXRpb24gd2l0aCBT
YXRlbGxpdGVzDQogICAgIC0gRW5hYmxlIFNTTCBDb21tdW5pY2F0aW9ucyBvdmVyIFJN
SQ0KDQpGb3IgMTAuMTAsIGN1c3RvbWVycyBzaG91bGQgZmlyc3QgdXBncmFkZSB0byAx
MC4xMToNCjxodHRwczovL3NvZnR3YXJlc3VwcG9ydC5ocGUuY29tL2dyb3VwL3NvZnR3
YXJlc3VwcG9ydC9zZWFyY2gtcmVzdWx0Ly0vZmFjZXRzDQphcmNoL2RvY3VtZW50L0xJ
RC9OQV8wMDAzMD4gYW5kIHRoZW4gYXBwbHkgdGhlIDEwLjExIHBhdGNoIGJlbG93LiAN
Cg0KICAqIEZvciAxMC4xMSwgYXBwbHkgdGhlIHBhdGNoIDEwLjExLjAzOg0KICAgICAt
DQo8aHR0cHM6Ly9zb2Z0d2FyZXN1cHBvcnQuaHBlLmNvbS9ncm91cC9zb2Z0d2FyZXN1
cHBvcnQvc2VhcmNoLXJlc3VsdC8tL2ZhY2V0cw0KYXJjaC9kb2N1bWVudC9MSUQvTkFf
MDAwNDQ+ICANCg0KICAqIFBsZWFzZSBmb2xsb3cgU1BFQ0lBTCBJTlNUQUxMIElOU1RS
VUNUSU9OUyBzZWN0aW9uIG1lbnRpb25lZCB1bmRlcg0KSW5zdGFsbGF0aW9uIEluc3Ry
dWN0aW9ucy4NCg0KICAqIEluIGFkZGl0aW9uLCBmb2xsb3cgdGhlIHByb2NlZHVyZXMg
ZGVzY3JpYmVkIGluIHRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgaW4NCnRoZSBOQSBIYXJk
ZW5pbmcgR3VpZGUgYXZhaWxhYmxlIGF0Og0KPGh0dHBzOi8vc29mdHdhcmVzdXBwb3J0
LmhwZS5jb20va20vS00wMTk2NDAwNz4NCg0KICAgIC0gRW5hYmxlIFNlY3VyZSBDb21t
dW5pY2F0aW9uIHdpdGggU2F0ZWxsaXRlcw0KICAgIC0gRW5hYmxlIFNTTCBDb21tdW5p
Y2F0aW9ucyBvdmVyIFJNSQ0KDQpGb3IgTkEgMTAuMjAsIGN1c3RvbWVycyBzaG91bGQg
Zmlyc3QgdXBncmFkZSB0byAxMC4yMQ0KPGh0dHBzOi8vc29mdHdhcmVzdXBwb3J0Lmhw
ZS5jb20vZ3JvdXAvc29mdHdhcmVzdXBwb3J0L3NlYXJjaC1yZXN1bHQvLS9mYWNldHMN
CmFyY2gvZG9jdW1lbnQvTElEL05BXzAwMDQwPiBhbmQgdGhlbiBhcHBseSB0aGUgMTAu
MjEgcGF0Y2ggYmVsb3c6DQoNCiAgKiBGb3IgMTAuMjEsIGFwcGx5IHRoZSBwYXRjaCAx
MC4yMS4wMTogDQogICAgLQ0KPGh0dHBzOi8vc29mdHdhcmVzdXBwb3J0LmhwZS5jb20v
Z3JvdXAvc29mdHdhcmVzdXBwb3J0L3NlYXJjaC1yZXN1bHQvLS9mYWNldHMNCmFyY2gv
ZG9jdW1lbnQvTElEL05BXzAwMDQzPg0KDQogICogUGxlYXNlIGZvbGxvdyBTUEVDSUFM
IElOU1RBTEwgSU5TVFJVQ1RJT05TIHNlY3Rpb24gbWVudGlvbmVkIHVuZGVyDQpJbnN0
YWxsYXRpb24gSW5zdHJ1Y3Rpb25zDQoNCiAgKiBJbiBhZGRpdGlvbiwgZm9sbG93IHRo
ZSBwcm9jZWR1cmVzIGRlc2NyaWJlZCBpbiB0aGUgZm9sbG93aW5nIHNlY3Rpb25zIGlu
DQp0aGUgTkEgSGFyZGVuaW5nIEd1aWRlIChhdmFpbGFibGUgYXQ6DQo8aHR0cHM6Ly9z
b2Z0d2FyZXN1cHBvcnQuaHBlLmNvbS9rbS9LTTAyNTAxMjk4Pg0KDQogICAgLSBFbmFi
bGUgU2VjdXJlIENvbW11bmljYXRpb24gd2l0aCBTYXRlbGxpdGVzDQogICAgLSBFbmFi
bGUgU1NMIENvbW11bmljYXRpb25zIG92ZXIgUk1JDQoNCkhJU1RPUlkNClZlcnNpb246
MSAocmV2LjEpIC0gNCBNYXkgMjAxNyBJbml0aWFsIHJlbGVhc2UNCg0KVGhpcmQgUGFy
dHkgU2VjdXJpdHkgUGF0Y2hlczogVGhpcmQgcGFydHkgc2VjdXJpdHkgcGF0Y2hlcyB0
aGF0IGFyZSB0byBiZQ0KaW5zdGFsbGVkIG9uIHN5c3RlbXMgcnVubmluZyBIZXdsZXR0
IFBhY2thcmQgRW50ZXJwcmlzZSAoSFBFKSBzb2Z0d2FyZQ0KcHJvZHVjdHMgc2hvdWxk
IGJlIGFwcGxpZWQgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBjdXN0b21lcidzIHBhdGNo
IG1hbmFnZW1lbnQNCnBvbGljeS4NCg0KU3VwcG9ydDogRm9yIGlzc3VlcyBhYm91dCBp
bXBsZW1lbnRpbmcgdGhlIHJlY29tbWVuZGF0aW9ucyBvZiB0aGlzIFNlY3VyaXR5DQpC
dWxsZXRpbiwgY29udGFjdCBub3JtYWwgSFBFIFNlcnZpY2VzIHN1cHBvcnQgY2hhbm5l
bC4gRm9yIG90aGVyIGlzc3VlcyBhYm91dA0KdGhlIGNvbnRlbnQgb2YgdGhpcyBTZWN1
cml0eSBCdWxsZXRpbiwgc2VuZCBlLW1haWwgdG8gc2VjdXJpdHktYWxlcnRAaHBlLmNv
bS4NCg0KUmVwb3J0OiBUbyByZXBvcnQgYSBwb3RlbnRpYWwgc2VjdXJpdHkgdnVsbmVy
YWJpbGl0eSBmb3IgYW55IEhQRSBzdXBwb3J0ZWQNCnByb2R1Y3Q6DQogIFdlYiBmb3Jt
OiBodHRwczovL3d3dy5ocGUuY29tL2luZm8vcmVwb3J0LXNlY3VyaXR5LXZ1bG5lcmFi
aWxpdHkNCiAgRW1haWw6IHNlY3VyaXR5LWFsZXJ0QGhwZS5jb20NCg0KU3Vic2NyaWJl
OiBUbyBpbml0aWF0ZSBhIHN1YnNjcmlwdGlvbiB0byByZWNlaXZlIGZ1dHVyZSBIUEUg
U2VjdXJpdHkgQnVsbGV0aW4NCmFsZXJ0cyB2aWEgRW1haWw6IGh0dHA6Ly93d3cuaHBl
LmNvbS9zdXBwb3J0L1N1YnNjcmliZXJfQ2hvaWNlDQoNClNlY3VyaXR5IEJ1bGxldGlu
IEFyY2hpdmU6IEEgbGlzdCBvZiByZWNlbnRseSByZWxlYXNlZCBTZWN1cml0eSBCdWxs
ZXRpbnMgaXMNCmF2YWlsYWJsZSBoZXJlOiBodHRwOi8vd3d3LmhwZS5jb20vc3VwcG9y
dC9TZWN1cml0eV9CdWxsZXRpbl9BcmNoaXZlDQoNClNvZnR3YXJlIFByb2R1Y3QgQ2F0
ZWdvcnk6IFRoZSBTb2Z0d2FyZSBQcm9kdWN0IENhdGVnb3J5IGlzIHJlcHJlc2VudGVk
IGluDQp0aGUgdGl0bGUgYnkgdGhlIHR3byBjaGFyYWN0ZXJzIGZvbGxvd2luZyBIUFNC
Lg0KDQozQyA9IDNDT00NCjNQID0gM3JkIFBhcnR5IFNvZnR3YXJlDQpHTiA9IEhQRSBH
ZW5lcmFsIFNvZnR3YXJlDQpIRiA9IEhQRSBIYXJkd2FyZSBhbmQgRmlybXdhcmUNCk1V
ID0gTXVsdGktUGxhdGZvcm0gU29mdHdhcmUNCk5TID0gTm9uU3RvcCBTZXJ2ZXJzDQpP
ViA9IE9wZW5WTVMNClBWID0gUHJvQ3VydmUNClNUID0gU3RvcmFnZSBTb2Z0d2FyZQ0K
VVggPSBIUC1VWA0KDQpDb3B5cmlnaHQgMjAxNiBIZXdsZXR0IFBhY2thcmQgRW50ZXJw
cmlzZQ0KDQpIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBzaGFsbCBub3QgYmUgbGlh
YmxlIGZvciB0ZWNobmljYWwgb3IgZWRpdG9yaWFsDQplcnJvcnMgb3Igb21pc3Npb25z
IGNvbnRhaW5lZCBoZXJlaW4uIFRoZSBpbmZvcm1hdGlvbiBwcm92aWRlZCBpcyBwcm92
aWRlZA0KImFzIGlzIiB3aXRob3V0IHdhcnJhbnR5IG9mIGFueSBraW5kLiBUbyB0aGUg
ZXh0ZW50IHBlcm1pdHRlZCBieSBsYXcsIG5laXRoZXINCkhQIG9yIGl0cyBhZmZpbGlh
dGVzLCBzdWJjb250cmFjdG9ycyBvciBzdXBwbGllcnMgd2lsbCBiZSBsaWFibGUgZm9y
DQppbmNpZGVudGFsLHNwZWNpYWwgb3IgY29uc2VxdWVudGlhbCBkYW1hZ2VzIGluY2x1
ZGluZyBkb3dudGltZSBjb3N0OyBsb3N0DQpwcm9maXRzOyBkYW1hZ2VzIHJlbGF0aW5n
IHRvIHRoZSBwcm9jdXJlbWVudCBvZiBzdWJzdGl0dXRlIHByb2R1Y3RzIG9yDQpzZXJ2
aWNlczsgb3IgZGFtYWdlcyBmb3IgbG9zcyBvZiBkYXRhLCBvciBzb2Z0d2FyZSByZXN0
b3JhdGlvbi4gVGhlDQppbmZvcm1hdGlvbiBpbiB0aGlzIGRvY3VtZW50IGlzIHN1Ympl
Y3QgdG8gY2hhbmdlIHdpdGhvdXQgbm90aWNlLiBIZXdsZXR0DQpQYWNrYXJkIEVudGVy
cHJpc2UgYW5kIHRoZSBuYW1lcyBvZiBIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBw
cm9kdWN0cw0KcmVmZXJlbmNlZCBoZXJlaW4gYXJlIHRyYWRlbWFya3Mgb2YgSGV3bGV0
dCBQYWNrYXJkIEVudGVycHJpc2UgaW4gdGhlIFVuaXRlZA0KU3RhdGVzIGFuZCBvdGhl
ciBjb3VudHJpZXMuIE90aGVyIHByb2R1Y3QgYW5kIGNvbXBhbnkgbmFtZXMgbWVudGlv
bmVkIGhlcmVpbg0KbWF5IGJlIHRyYWRlbWFya3Mgb2YgdGhlaXIgcmVzcGVjdGl2ZSBv
d25lcnMuDQotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0tLQpWZXJzaW9uOiBHbnVQ
RyB2MQoKaVFFY0JBRUJDQUFHQlFKWkMxVGNBQW9KRUxYaEF4dDdTWmFpYjdVSC8zZTMr
aEJnQi83YnBJMHRhNURHeEFKSApSdkJweW5VdWM4REFQK2ZLVHBXeDRyNkxad1VuWFls
eXRqai96YWlYMHRuZWtaZHNDRHMrZldpTGltUTZCTnpwCmhZM29GY0JQcXBtYkt0dzNE
bXZlUjJrNzBVcTA1ZGhoWjljaU5UQmdhOGp2Y1ViS0Z4bEIvNDF5eklReDZLZHAKa1gv
U24zWFF1TlA4eWxCYURMM29nY2pVc2ZvaVpOQUV0TzJYUkRiSis1TVhvNFRyNnQ0b2dz
dExVWlQ2TTJUKwpwbHJJb21RelUyY0FJN3FWbE5NUlcxWDRyUkEwRFAzU1dJTkk1cGhF
eVBRRWJZQ1BDZVk1L3BmNTVLbGhHV3VqCmNYc0V3eVhYZUJNQVNEOWJzd3EzMitIWVNr
YzZxdFlSYVFGd3VBVHRXV0xZOTRaY3RSa2l4S3BNcHpzczVscz0KPVlPeXYKLS0tLS1F
TkQgUEdQIFNJR05BVFVSRS0tLS0tCg==