CVE-2023-46170

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46170
IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7130084 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/269407 Vendor Advisory
https://www.ibm.com/support/pages/node/7130084 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:ibm:ds8900f_firmware:89.22.19.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.30.68.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.32.40.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.33.48.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:ds8900f:-:*:*:*:*:*:*:*
History

11 Mar 2025, 16:55

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7130084 - () https://www.ibm.com/support/pages/node/7130084 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/269407 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/269407 - Vendor Advisory
CWE NVD-CWE-noinfo
First Time Ibm
Ibm ds8900f
Ibm ds8900f Firmware
CPE cpe:2.3:o:ibm:ds8900f_firmware:89.22.19.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.30.68.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.32.40.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:ds8900f:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:ds8900f_firmware:89.33.48.0:*:*:*:*:*:*:*

21 Nov 2024, 08:28

Type Values Removed Values Added
References
  • () https://exchange.xforce.ibmcloud.com/vulnerabilities/269407 -
References () https://www.ibm.com/support/pages/node/7130084 - () https://www.ibm.com/support/pages/node/7130084 -

27 Sep 2024, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/269407', 'source': 'psirt@us.ibm.com'}
Summary (en) IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names. IBM X-Force ID: 269407. (en) IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.
CWE CWE-200 CWE-204

08 Mar 2024, 14:02

Type Values Removed Values Added
Summary
  • (es) IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0 y 89.33.48.0 podrían permitir a un usuario autenticado leer archivos arbitrariamente después de enumerar los nombres de los archivos. ID de IBM X-Force: 269407.

07 Mar 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-07 21:15

Updated : 2025-03-11 16:55

NVD link : CVE-2023-46170

Mitre link : CVE-2023-46170

CVE.ORG link : CVE-2023-46170

JSON object : View

Products Affected

ibm

  • ds8900f
  • ds8900f_firmware
CWE
CWE-204

Observable Response Discrepancy

NVD-CWE-noinfo