CVE-2022-43869

Katalog CVE

CVSS 6.5 · Medium EPSS 0,99%

Kerentanan Use of Externally-Controlled Format String pada ibm elastic storage system, ibm spectrum scale. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.

Rincian

Terbit di NVD

12 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-134: Use of Externally-Controlled Format String

EPSS (30 hari)

0,99% peluang dieksploitasi; lebih tinggi dari 61,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/239539 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6909465 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6909469 patch · advisory vendor