Lucene search
HistoryFeb 10, 2024 - 4:15 p.m.
CVE-2023-50957
ibm
storage defender
resiliency service
privileged user
unauthorized actions
encrypted data
clear text key storage
x-force id
275783
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
18.9%
IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783.
Affected configurations
Node
ibmstorage_defender_resiliency_serviceMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | storage_defender_resiliency_service | 2.0 | cpe:2.3:a:ibm:storage_defender_resiliency_service:2.0:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
prion
prion
Code injection
2024-02-10 16:15:00
cvelist
cvelist
cve
cve
CVE-2023-50957
2024-02-10 16:15:07
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
18.9%
Related for NVD:CVE-2023-50957