IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7028420 | Mitigation Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Sep 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:ibm:aix:7.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:vios:3.1:*:*:*:*:*:*:* cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.ibm.com/support/pages/node/7028420 - Mitigation, Vendor Advisory | |
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/263476 - VDB Entry, Vendor Advisory | |
| First Time |
Ibm
Ibm aix Ibm vios |
|
| CWE | CWE-327 |
24 Aug 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-24 14:15
Updated : 2024-09-20 19:15
NVD link : CVE-2023-40371
Mitre link : CVE-2023-40371
JSON object : View
Products Affected
ibm
- vios
- aix
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm