Hard-Coded Credentials Vulnerability in IBM Storage Fusion HCI

CVE-2023-50948

What is CVE-2023-50948?

IBM Storage Fusion HCI versions 2.1.0 through 2.6.1 contain hard-coded credentials that are utilized for various operations, including inbound authentication and outbound communications with external components. This flaw can lead to unauthorized access and potential exploitation due to the insecure management of passwords and cryptographic keys. Users of these affected versions should review their implementations while monitoring for security updates from IBM to mitigate any associated risks.

References