CVE-2023-46170 MEDIUM

CVE-2023-46170: IBM DS8900F information disclosure

Vendor Ibm
Product DS8900F
Weakness CWE-204
Published March 7, 2024
Last update September 27, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

Key dates

02Disclosure timeline

March 7, 2024 CVE published
September 27, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-4113 CVE-2025-62181 Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. CVE-2026-24468 OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API CVE-2025-59116 User enumeration in Windu CMS CVE-2026-20195 Cisco Identity Services Engine Observable Response Discrepancy Vulnerability