CVE-2023-25681 IBM Spectrum Virtualize security bypass
LDAP users with MFA requirements can bypass authentication on the CIM interface using only credentials, requiring a patch for IBM Spectrum Virtualize.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-25681?
CVE-2023-25681 is a medium-severity authentication bypass vulnerability in IBM Spectrum Virtualize, published on 5 Mar 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
Weakness: CWE-308
Which versions are affected by CVE-2023-25681?
It affects 1 product.
Products include Ibm Spectrum Virtualize.
How do I fix CVE-2023-25681?
No fix has been published for CVE-2023-25681 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-25681 being exploited?
There is no known exploitation of CVE-2023-25681 in the wild and no public exploit code.
Other vulnerabilities in IBM Spectrum Virtualize
- CVE-2022-43870 IBM Spectrum Virtualize information disclosure
- CVE-2022-43873 IBM Spectrum Virtualize privilege escalation
- CVE-2023-27870 IBM Spectrum Virtualize information disclosure
- CVE-2022-39167 IBM Spectrum Virtualize information disclosure
- CVE-2021-38969 Hardcoded credentials in Spectrum Virtualize
Sources
Also known as GHSA-gfgq-4pqr-j2gw.