[security bulletin] HPESBHF03716 rev.1 - HPE Intelligent Management Center (IMC) PLAT, Remote Authentication Bypass
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