PT-2023-29402 · Softiron · Softiron Hypercloud

CVE-2023-45085 · Publicado 2023-12-05 · Atualizado 2023-12-12

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 2.0.0 through 2.0.2

Description An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads that may be deployed during this time window.

Recommendations For SoftIron HyperCloud versions 2.0.0 through 2.0.2, update to version 2.0.3 or later to resolve the issue.

Correção

Improper Initialization

Enumeração de Fraquezas

CWE-1419

CWE-665

Identificadores relacionados

CVE-2023-45085

Produtos afetados

Softiron Hypercloud

Referências · 4

• https://twitter.com/CVEnew/status/1732080744779149569 · Publicação no Twitter
• https://advisories.softiron.cloud · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-45085 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-45085 · Aviso do Fabricante