CVE-2023-46170

EPSS 0.05%
Veröffentlicht 07.03.2024 21:15:06
Zuletzt bearbeitet 11.03.2025 16:55:27
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Ds8900f Firmware Version89.22.19.0

Ibm ≫ Ds8900f Version-

Ibm ≫ Ds8900f Firmware Version89.30.68.0

Ibm ≫ Ds8900f Version-

Ibm ≫ Ds8900f Firmware Version89.32.40.0

Ibm ≫ Ds8900f Version-

Ibm ≫ Ds8900f Firmware Version89.33.48.0

Ibm ≫ Ds8900f Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.157

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-204 Observable Response Discrepancy

The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

https://www.ibm.com/support/pages/node/7130084

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/269407

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-46170

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-46170

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-46170

EUVD