Lucene search
NvidiaCVELIST:CVE-2023-31025HistoryJan 12, 2024 - 6:31 p.m.
CVE-2023-31025 CVE
2024-01-1218:31:42
CWE-90
nvidia
www.cve.org
3
nvidia dgx a100
bmc
ldap
user injection
information disclosure
vulnerability
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
37.2%
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "DGX A100",
"vendor": "nvidia",
"versions": [
{
"status": "affected",
"version": "All BMC versions prior to 00.22.05"
}
]
}
]Related
prion
prion
Information disclosure
2024-01-12 19:15:00
nvd
nvd
CVE-2023-31025
2024-01-12 19:15:09
cve
cve
CVE-2023-31025
2024-01-12 19:15:09
nvidia
nvidia
Security Bulletin: NVIDIA DGX A100 - January 2024
2024-01-11 00:00:00
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
37.2%
Related for CVELIST:CVE-2023-31025