CVE-2023-49877
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.2%
IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submitting a specially crafted HTTP GET request, an attacker could exploit this vulnerability to view application source code, system configuration information, or other sensitive data related to the Management Interface. IBM X-Force ID: 272651.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | system_storage_virtualization_engine_ts7700 | 8.52.103.23 | cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:8.52.103.23:*:*:*:*:*:*:* |
| ibm | system_storage_virtualization_engine_ts7700 | 8.53.1.21 | cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:8.53.1.21:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "System Storage Virtualization Engine",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "8.52.103.23, 8.53.1.21"
}
]
}
]Related
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.2%