Lucene search
NvidiaCVELIST:CVE-2024-0104HistoryAug 08, 2024 - 5:15 p.m.
CVE-2024-0104
2024-08-0817:15:19
CWE-284
nvidia
www.cve.org
2
nvidia
mellanox
ldap
aaa
vulnerability
information disclosure
data tampering
privileges
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
20.0%
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Mellanox OS LTS"
],
"product": "Mellanox OS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.2100"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ONYX",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.10.4302"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Skyway"
],
"product": "Skyway",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 8.2.2100"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"MetroX"
],
"product": "MetroX-3 XC",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 18.2.2100"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"MetroX"
],
"product": "MetroX-2",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.1000"
}
]
}
]Related
nvd
nvd
CVE-2024-0104
2024-08-08 18:15:09
cve
cve
CVE-2024-0104
2024-08-08 18:15:09
vulnrichment
vulnrichment
CVE-2024-0104
2024-08-08 17:15:19
nvidia
nvidia
Security Bulletin: NVIDIA Mellanox OS, ONYX, Skyway, MetroX-3 XC - July 2024
2024-07-23 00:00:00
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
20.0%
Related for CVELIST:CVE-2024-0104