CVE-2023-27870 — Sensitive Information Exposure in IBM Spectrum Virtualize

CWE-200 — Sensitive Information ExposureCWE-203 — Observable Discrepancy3 documents3 sources
Severity
7.5HIGHNVD
CNA5.9
EPSS
0.1%
top 75.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Spectrum Virtualize
Timeline
PublishedMay 11

Description

IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m67g-36f9-cxh6: IBM Spectrum Virtualize 8↗2023-05-11
▶
CVEList
IBM Spectrum Virtualize information disclosure↗2023-05-11
▶
CVE-2023-27870 — Sensitive Information Exposure in IBM | cvebase