LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/247033 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/247033 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/6962203 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/6962203 | Vendor Advisory |
Configurations
History
04 Mar 2025, 12:25
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References | () https://www.ibm.com/support/pages/node/6962203 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/247033 - Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:spectrum_virtualize:8.5.0.0:*:*:*:*:*:*:* | |
| First Time |
Ibm spectrum Virtualize
Ibm |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
05 Mar 2024, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-05 20:16
Updated : 2025-03-04 12:25
NVD link : CVE-2023-25681
Mitre link : CVE-2023-25681
JSON object : View
Products Affected
ibm
- spectrum_virtualize
CWE
No CWE.