CVE-2023-50956

Published Dec 18, 2024

Last updated 5 months ago

Overview

Description
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text.
Source
psirt@us.ibm.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Primary
Base score
4.4
Impact score
3.6
Exploitability score
0.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

psirt@us.ibm.com
CWE-256

Social media

Hype score
Not currently trending
  1. 🚨 CVE-2023-50956 (Published: 2024-12-18) - A high-severity vulnerability affects IBM Nan. Ensure your systems are updated to the latest version to mitigate risks. For detailed remediation steps, visit: https://t.co/nGdOjcZd50. Stay secure! #CyberSecurity #IBM #VulnerabilityAlert

    @transilienceai

    19 Dec 2024

    28 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 CVE-2023-50956 (Published: 2024-12-18) - A high-severity vulnerability in IBM Nan affects multiple versions. Users are urged to update to the latest patch to mitigate risks. For detailed remediation steps, visit: https://t.co/nGdOjcZd50 #CyberSecurity #IBM #VulnerabilityAlert

    @transilienceai

    19 Dec 2024

    29 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2023-50956 (Published: 2024-12-18) - A high-severity vulnerability affecting IBM Nan. Ensure your systems are updated to the latest version to mitigate risks. For detailed remediation steps, visit: https://t.co/nGdOjcZd50. Stay secure! #CyberSecurity #IBM… https://t.co/Qr6Ly9

    @transilienceai

    19 Dec 2024

    31 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. CVE-2023-50956 Clear Text Secret Key Exposure in IBM Storage Defender 2.0.9 IBM Storag... https://t.co/I3g1zoEELc Vulnerability Notification: https://t.co/xhLrNnfyrO

    @VulmonFeeds

    18 Dec 2024

    25 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2023-50956 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are st… https://t.co/7UCXEmVYUw

    @CVEnew

    18 Dec 2024

    321 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.