THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-22326

IBM System Storage improper authentication

Assigner:ibm (9a959283-ebb5-44b6-b705-dcc2bbced522)
Reserved:2024-01-08
Published:2024-06-06
Updated:2024-06-06

Description

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection.   IBM X-Force ID: 279518.



MEDIUM: 5.0CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status
unaffected

89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, 89.40.93.0
affected

References

https://www.ibm.com/support/pages/node/7156621 vendor-advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/279518 vdb-entry

cve.org CVE-2024-22326

nvd.nist.gov CVE-2024-22326

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-22326