Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2024-0104

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this v

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA Mellanox OS

Default version status: unaffected

  • All versions prior to and including 3.11.2100affected

NVIDIA ONYX

Default version status: unaffected

  • All versions prior to and including 3.10.4302affected

NVIDIA Skyway

Default version status: unaffected

  • All versions prior to and including 8.2.2100affected

NVIDIA MetroX-3 XC

Default version status: unaffected

  • All versions prior to and including 18.2.2100affected

NVIDIA MetroX-2

Default version status: unaffected

  • All versions prior to and including 3.11.1000affected

References