IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/7028420 | Mitigation Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/7028420 | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.2 |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7028420 - Mitigation, Vendor Advisory |
20 Sep 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-327 |
30 Aug 2023, 14:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 - VDB Entry, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/7028420 - Mitigation, Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Ibm
Ibm vios Ibm aix |
|
| CPE | cpe:2.3:a:ibm:vios:3.1:*:*:*:*:*:*:* cpe:2.3:o:ibm:aix:7.3:*:*:*:*:*:*:* cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:* |
24 Aug 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-24 14:15
Updated : 2024-11-21 08:19
NVD link : CVE-2023-40371
Mitre link : CVE-2023-40371
CVE.ORG link : CVE-2023-40371
JSON object : View
Products Affected
ibm
- aix
- vios
CWE