6.3
CVE-2024-22326
- EPSS 0.07%
- Veröffentlicht 06.06.2024 19:15:52
- Zuletzt bearbeitet 21.11.2024 08:56:03
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Ds8900f Firmware Version89.22.19.0
Ibm ≫ Ds8900f Firmware Version89.30.68.0
Ibm ≫ Ds8900f Firmware Version89.32.40.0
Ibm ≫ Ds8900f Firmware Version89.33.48.0
Ibm ≫ Ds8900f Firmware Version89.40.83.0
Ibm ≫ Ds8900f Firmware Version89.40.93.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.204 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
| psirt@us.ibm.com | 5 | 1.6 | 3.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.