CVE-2023-46170

MEDIUM

IBM DS8900F HMC - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

Scores

CVSS v3 6.5
EPSS 0.0005
EPSS Percentile 16.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-204
Status published
Products (4)
ibm/ds8900f_firmware 89.22.19.0
ibm/ds8900f_firmware 89.30.68.0
ibm/ds8900f_firmware 89.32.40.0
ibm/ds8900f_firmware 89.33.48.0
Published Mar 07, 2024
Tracked Since Feb 18, 2026