WID-SEC-W-2023-3143

DeutschShown in its original language — a full translation is planned for a future version.

IBM Storage Produkte: Schwachstelle ermöglicht Offenlegung von Informationen

view advisory published 2023-12-12

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM SAN Volume Controller, IBM Storwize und IBM FlashSystem ausnutzen, um Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-43042US	high7.5OT elevated	0.71% (54th)	—	2023-12-14
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874.

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-3143 - CSAF Versionself
WID-SEC-2023-3143 - Portal Versionself
IBM Security Bulletin vom 2023-12-12external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan