CVE-2023-6538

CVSS V2 None CVSS V3 None

Description

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration backup, that would normally be barred to those specific administrative roles.

Overview

CVE ID
CVE-2023-6538

Assigner
HITVAN

Vulnerability Status
PUBLISHED

Published Version
2023-12-11T17:54:11.961Z

Last Modified Date
2023-12-12T16:37:19.900Z

Weakness Enumerations

CWE	URL
CWE-285	http://cwe.mitre.org/data/definitions/285.html

References

Reference URL	Reference Tags
https://knowledge.hitachivantara.com/Security/System_Management_Unit_(SMU)_versions_prior_to_14.8.7825.01%2C_used_to_manage_Hitachi_Vantara_NAS_products_is_susceptible_to_unintended_information_disclosure_via_unprivileged_access_to_SMU_configuration_backu

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-6538
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6538

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 07:00:57				Added to TrackCVE