Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-47700

IBM Storage Virtualize improper certificate validation

Description

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Storage Virtualize

Default version status: unaffected

  • 8.6affected

References