[security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege
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