CVE-2024-22326

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection.   IBM X-Force ID: 279518.

Score

CVSS 3.1 6.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2024-06-06

Last modified

2024-08-01

Weaknesses

CWE-306

Affected products

• Ds8900f Firmware (Ibm)
• System Storage Ds8000 Management Console Firmware (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/279518
• https://www.ibm.com/support/pages/node/7156621