IbmVULNRICHMENT:CVE-2024-22326CVE-2024-22326 IBM System Storage improper authentication
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518.
CNA Affected
[
{
"cpes": [
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.22.19.0:*:*:*:*:*:*:*",
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.30.68.0:*:*:*:*:*:*:*",
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.32.40.0:*:*:*:*:*:*:*",
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.33.48.0:*:*:*:*:*:*:*",
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.40.83.0:*:*:*:*:*:*:*",
"cpe:2.3:o:ibm:system_storage_ds8000_management_console_firmware:89.40.93.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "System Storage DS8900F",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, 89.40.93.0"
}
]
}
]Related
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%