Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2023-24801 CVE-2023-46169 · GHSA-cjwm-hvhx-qxpm

IBM DS8900F file manipulation

Priority LOW 29

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00506 Published 2024-03-07 No fix listed CWE-41
TI-2023-24804 CVE-2023-46172 · GHSA-637c-hjh6-3j32

IBM DS8900F security bypass

Priority MEDIUM 43

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow a remote attacker to bypass authentication restrictions for authorized user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2024-03-07 No fix listed CWE-287
TI-2023-24802 CVE-2023-46170 · GHSA-q4mq-w4v3-mv77

IBM DS8900F information disclosure

Priority LOW 29

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00452 Published 2024-03-07 No fix listed CWE-204
TI-2023-24803 CVE-2023-46171 · GHSA-2h4f-vpmv-8mr9

IBM DS8900F information disclosure

Priority LOW 20

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to view sensitive log information after enumerating filenames.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00364 Published 2024-03-07 No fix listed CWE-532