CVE-2023-25681

EPSS 0.04%
Published 05.03.2024 20:16:00
Last modified 04.03.2025 12:25:10
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on.  IBM X-Force ID:  247033.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Spectrum Virtualize Version8.5.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.087

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
psirt@us.ibm.com	5.3	1.6	3.6	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-308 Use of Single-factor Authentication

The use of single-factor authentication can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme.

https://exchange.xforce.ibmcloud.com/vulnerabilities/247033

Vendor Advisory

https://www.ibm.com/support/pages/node/6962203

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-25681

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25681

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25681

EUVD