5.3
Moyenne
CVE-2023-25681 LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still…
Description
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spectrum Virtualize | 8.5 | Pas de correctif indiqué |
Autres CVE de Spectrum Virtualize
Les 6 CVE de Spectrum Virtualize →
CVE-2023-27870
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a…
5.9
Moyenne
CVE-2022-43873
An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute…
6.3
Moyenne
CVE-2022-43870
IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files
6.5
Moyenne
CVE-2022-39167
IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive…
5.9
Moyenne