[security bulletin] HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege
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