Lucene search
HistoryDec 14, 2023 - 1:15 a.m.
CVE-2023-43042
ibm
san volume controller
storwize
flashsystem
storage virtualize
default password
security issue
x-force id 266874
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
48.6%
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874.
Affected configurations
Node
ibmstorage_virtualizeMatch8.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | storage_virtualize | 8.3 | cpe:2.3:a:ibm:storage_virtualize:8.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-43042 IBM Storage Virtualize information disclosure
2023-12-14 00:46:31
ibm
ibm
cve
cve
CVE-2023-43042
2023-12-14 01:15:07
prion
prion
Default credentials
2023-12-14 01:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
48.6%
Related for NVD:CVE-2023-43042