6.3
CVE-2024-22326
- EPSS 0.05%
- Published 06.06.2024 19:15:52
- Last modified 21.11.2024 08:56:03
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Ds8900f Firmware Version89.22.19.0
Ibm ≫ Ds8900f Firmware Version89.30.68.0
Ibm ≫ Ds8900f Firmware Version89.32.40.0
Ibm ≫ Ds8900f Firmware Version89.33.48.0
Ibm ≫ Ds8900f Firmware Version89.40.83.0
Ibm ≫ Ds8900f Firmware Version89.40.93.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.145 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
| psirt@us.ibm.com | 5 | 1.6 | 3.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.