Authentication Flaw in IBM Spectrum Virtualize by IBM
CVE-2021-38969

5.6MEDIUM

Key Information:

Vendor
IBM
Status
Spectrum Virtualize
Vendor
CVE Published:
11 May 2022

Summary

An authentication vulnerability exists within IBM Spectrum Virtualize versions 8.2, 8.3, and 8.4, enabling attackers to exploit the reuse of support-generated credentials. This flaw could allow unauthorized access to the system, potentially leading to a breach of sensitive information. Users are encouraged to upgrade to the latest versions to mitigate risks associated with this vulnerability.

Affected Version(s)

Spectrum Virtualize 8.4

Spectrum Virtualize 8.3

Spectrum Virtualize 8.2

References

https://www.ibm.com/support/pages/node/6584337
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/212609
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.