CVEvulnerability
CVE-2022-43869
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-134
Description
IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.
Affected configurations
• ibm elastic storage system (>= 6.1.0.0 <= 6.1.2.4)
• ibm elastic storage system (>= 6.1.3.0 <= 6.1.4.1)
• ibm spectrum scale (>= 5.1.0.0 <= 5.1.2.8)
• ibm spectrum scale (>= 5.1.3.0 <= 5.1.5.1)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/239539 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6909465 Patch, Vendor Advisory
- https://www.ibm.com/support/pages/node/6909469 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/239539 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6909465 Patch, Vendor Advisory
- https://www.ibm.com/support/pages/node/6909469 Patch, Vendor Advisory