1. Home
  2. CVE Database
  3. CVE-2023-49877
MEDIUM · 4.3

CVE-2023-49877

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submit...

Vulnerability Description

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submitting a specially crafted HTTP GET request, an attacker could exploit this vulnerability to view application source code, system configuration information, or other sensitive data related to the Management Interface. IBM X-Force ID: 272651.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmVirtualization Engine Ts7760 3957-Vec Firmware<= 8.52.103.23
IbmVirtualization Engine Ts7760 3957-Vecr5.2.1
IbmVirtualization Engine Ts7770 3957-Ved Firmware<= 8.52.103.23
IbmVirtualization Engine Ts7770 3957-Vedr5.2.1
IbmVirtualization Engine Ts7770 3948-Ved Firmware<= 8.53.1.21
IbmVirtualization Engine Ts7770 3948-Vedr5.3

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2023-49877?

CVE-2023-49877 is a vulnerability with a CVSS score of 4.3 (MEDIUM). IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submit...

How severe is CVE-2023-49877?

CVE-2023-49877 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-49877?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Virtualization Engine Ts7760 3957-Vec Firmware, Ibm Virtualization Engine Ts7760 3957-Vec, Ibm Virtualization Engine Ts7770 3957-Ved Firmware, Ibm Virtualization Engine Ts7770 3957-Ved, Ibm Virtualization Engine Ts7770 3948-Ved Firmware.