CVE-2024-22326 - IBM System Storage improper authentication

Back Back to CVE browser

MEDIUM

IBM System Storage improper authentication

Published Jun 6, 2024

6.3

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518.

Affected products

Vendor IBM Product System Storage DS8900F Default
unaffected
- Version
  89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, 89.40.93.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

System Storage DS8900F

unaffected

Version	Status	Constraints
89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, 89.40.93.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19887
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/279518
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7156621
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19887		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/279518		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7156621		vendor-advisoryVendor Advisory