Data Pool Creation Vulnerability in SoftIron HyperCloud
CVE-2024-13058

4.8MEDIUM

Key Information:

Vendor

Softiron

Status
Hypercloud
Vendor
CVE Published:
30 December 2024

What is CVE-2024-13058?

An issue in SoftIron HyperCloud permits authenticated non-admin users to create data pools, which may negatively affect the performance and availability of the backend software-defined storage subsystem. This vulnerability is particularly concerning as it compromises the integrity of the storage management process, thus leading to potential disruptions in service. This impact is prevalent in versions from 2.3.0 up to, but not including, 2.5.0 of SoftIron HyperCloud and associated products. Users are encouraged to review the related security advisories to mitigate exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HyperCloud 2.3.0 < 2.5.0

References

https://advisories.softiron.cloud/

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

JSON
.