PT-2024-13416 · Ibm · Ibm Storage Protect Plus Server

Published 2024-02-02 · Updated 2024-02-08 · CVE-2023-47148

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storage Protect Plus Server versions 10.1.0 through 10.1.15.2

Description The issue allows a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints, which could be used in further attacks against the system.

Recommendations For versions 10.1.0 through 10.1.15.2, consider restricting access to the Admin Console to minimize the risk of exploitation until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-47148

Affected Products

Ibm Storage Protect Plus Server

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/270599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47148 · Security Note
• https://ibm.com/support/pages/node/7096482 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47148 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1753442516978810887 · Twitter Post
• https://twitter.com/CVEnew/status/1753406820721274932 · Twitter Post