HPE: 🆘 HPE Security Advisory HPESBHF05097 rev.1: Local Disclosure of Information (Intel Processor advisory–related)

HPE Security Advisory

Published Date: Not specified

Advisory Summary

🗓️ 📅 Aug 11, 2026

🔍 What’s new / why it matters
HPE has released HPESBHF05097 rev.1 covering HPE ProLiant DL/ML/XD, HPE Alletra, and HPE Synergy systems that use certain Intel processors in conjunction with INTEL-SA-01404 and guidance related to Intel Xeon 6 processor with Intel TDX.
This advisory addresses a Local Disclosure of Information exposure—typically the kind of issue where an attacker with local execution context may be able to infer or access sensitive information that should not be exposed.

• Threat model: Requires local access (e.g., compromised workload/container/VM or malicious insider/admin context) to attempt disclosure.
• Data center impact: In multi-tenant or heavily virtualized environments, “local” can effectively become “cross-workload” if isolation boundaries are weakened.
• Operational likelihood: Often most relevant to environments running virtualization, confidential computing/TDX-adjacent configurations, or platforms with complex privilege boundaries.

• Check your ProLiant / Alletra / Synergy hardware model and installed Intel processor / firmware stack against the advisory scope.
• Prioritize updates to the components HPE specifies as required for mitigation.
• Plan reboots/service windows as needed (firmware/BIOS/host security mitigations commonly require it).
• Reduce local privilege availability (least privilege, limit host access, tighten orchestration/console permissions).
• Confirm versions/firmware levels match the advisory’s “fixed” criteria and rerun any internal compliance checks.

• Treat as a confidentiality concern with local attacker prerequisites.
• Ensure your vulnerability management program maps this advisory to your asset inventory (including virtualization/TDX-related deployment profiles).

📎
🔗

Reference: Vendor Advisory