1. Home
  2. CVE Database
  3. CVE-2023-49878
MEDIUM · 4.3

CVE-2023-49878

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the...

Vulnerability Description

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 272652.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmVirtualization Engine Ts7760 3957-Vec Firmware<= 8.52.103.23
IbmVirtualization Engine Ts7760 3957-Vecr5.2.1
IbmVirtualization Engine Ts7770 3957-Ved Firmware<= 8.52.103.23
IbmVirtualization Engine Ts7770 3957-Vedr5.2.1
IbmVirtualization Engine Ts7770 3948-Ved Firmware<= 8.53.1.21
IbmVirtualization Engine Ts7770 3948-Vedr5.3

Related Weaknesses (CWE)

CWE-209

References

FAQ

What is CVE-2023-49878?

CVE-2023-49878 is a vulnerability with a CVSS score of 4.3 (MEDIUM). IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the...

How severe is CVE-2023-49878?

CVE-2023-49878 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-49878?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Virtualization Engine Ts7760 3957-Vec Firmware, Ibm Virtualization Engine Ts7760 3957-Vec, Ibm Virtualization Engine Ts7770 3957-Ved Firmware, Ibm Virtualization Engine Ts7770 3957-Ved, Ibm Virtualization Engine Ts7770 3948-Ved Firmware.