Lucene search

IbmCVE-2023-27870

HistoryMay 11, 2023 - 8:15 p.m.

CVE-2023-27870

2023-05-1120:15:09

CWE-200

ibm

web.nvd.nist.gov

ibm

spectrum virtualize

8.5

disclosure

sensitive

credentials

fix central

download

security vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.

Affected configurations

Nvd

Vulners

Node

ibmspectrum_virtualizeMatch8.5

VendorProductVersionCPE
ibmspectrum_virtualize8.5cpe:2.3:a:ibm:spectrum_virtualize:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	spectrum_virtualize	8.5	cpe:2.3:a:ibm:spectrum_virtualize:8.5:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Spectrum Virtualize",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/249518

www.ibm.com/support/pages/node/6985697

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

Related for CVE-2023-27870