WID-SEC-W-2023-0442

DeutschShown in its original language — a full translation is planned for a future version.

IBM Storwize, IBM SAN Volume Controller, IBM FlashSystem: Schwachstelle ermöglicht Offenlegung von Informationen

view advisory published 2023-02-21

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Storwize, IBM SAN Volume Controller und IBM FlashSystem ausnutzen, um Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-43870US	medium6.5	0.63% (50th)	—	2023-02-22
IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540.

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-0442 - CSAF Versionself
WID-SEC-2023-0442 - Portal Versionself
IBM Security Bulletin vom 2023-02-21external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan