Lucene search

K
cvelistIbmCVELIST:CVE-2022-43869
HistoryFeb 08, 2023 - 6:47 p.m.

CVE-2022-43869 IBM Spectrum Scale denial of service

2023-02-0818:47:17
CWE-134
ibm
www.cve.org
ibm
spectrum scale
denial of service

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Elastic Storage System",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "6.1.2.4",
        "status": "affected",
        "version": "6.1.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Spectrum Scale",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "5.1.2.8",
        "status": "affected",
        "version": "5.1.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.1.5.1",
        "status": "affected",
        "version": "5.1.3.0",
        "versionType": "semver"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

Related for CVELIST:CVE-2022-43869