Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-13058

Authenticated, non-admin users can create storage pools via the sifi API

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SoftIron

Description

An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined storage subsystem. This issue only impacts SoftIron HyperCloud and related software products (such as VM Squared) software versions 2.3.0 to before 2.5.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SoftIron HyperCloud

Default version status: unaffected

  • 2.3.0 to < 2.5.0affected

References