CVE-2023-47700

Medium

Description

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016.

SeverityMedium

CVSS5.9

Exploit probability—

Product

Ibm Storage Virtualize

PublishedFeb 7, 2024

First seenFeb 7, 2024

Weakness typeCWE-295CWE-295

How to fix

Vendor advisories

ibm.com/support/pages/node/7114767

Affected products

Product	Affected versions	Fixed in
ibm storage_virtualize	8.6	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.