Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Spectrum Virtualize security bypass
Vulnerability Description
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
使用单一因素认证机制
Vulnerability Title
IBM Spectrum Virtualize 安全漏洞
Vulnerability Description
IBM Spectrum Virtualize是美国国际商业机器（IBM）公司的一个块存储虚拟化系统。可提高新的和现有存储基础架构的数据价值、安全性和简单性。 IBM Spectrum Virtualize 8.5版本存在安全漏洞，该漏洞源于配置为需要多重身份验证的 LDAP 用户仍然可以仅使用用户名和密码从 CIM 界面通过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A