CVE-2023-40371: IBM AIX information disclosure

Q: What is the vulnerability ID of this security issue?

The vulnerability ID of this security issue is CVE-2023-40371.

Q: What is the severity of CVE-2023-40371?

The severity of CVE-2023-40371 is medium (6.2).

Q: Which versions of IBM AIX and IBM VIOS are affected by CVE-2023-40371?

IBM AIX versions 7.2 and 7.3, as well as IBM VIOS version 3.1, are affected by CVE-2023-40371.

Q: What is the impact of CVE-2023-40371?

CVE-2023-40371 allows a non-privileged local user to access files outside of those allowed due to improper access controls.

Q: How can I fix the vulnerability in IBM AIX and IBM VIOS?

To fix the vulnerability in IBM AIX and IBM VIOS, it is recommended to apply the relevant patches provided by IBM.

Published Aug 23, 2023

Updated

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.

Other sources

IBM AIX's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls.

Affected Software

6 affected components

IBM VIOS=3.1

IBM AIX=7.2

IBM AIX=7.3

IBM AIX<=7.2

IBM AIX<=7.3

IBM VIOS<=3.1

Event History

Aug 23, 2023

CVE Published

12:00 AM

Aug 24, 2023

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7028420

Frequently Asked Questions

What is the vulnerability ID of this security issue?

The vulnerability ID of this security issue is CVE-2023-40371.

What is the severity of CVE-2023-40371?

The severity of CVE-2023-40371 is medium (6.2).

Which versions of IBM AIX and IBM VIOS are affected by CVE-2023-40371?