CVE-2021-26579: HPE Unified Data Management

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys.

Affected products

• HPE Unified Data Management: version 1.2009.0 only; version 1.2101.0 only

Published 2021-03-30. Last modified 2026-06-17.