What the vulnerability does
01Description
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass.
CVSS base score
7.1/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Key dates
02Disclosure timeline
January 13, 2023
CVE published
April 7, 2025
Record updated
External resources
03References
Related vulnerabilities
