Vulnerability · Published Mar 21, 2024 · Assigned by ibm
CVE-2023-47715IBM Storage Protect Plus Server improper access control
Medium 4.3
In plain English
A medium-severity privilege mismanagement in Storage Protect Plus Server from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 73.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Storage Protect Plus Server | 10.1.0 – through 10.1.16 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N