CVE-2023-47700: IBM Storage Virtualize improper certificate validation
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016.
Other sources
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47700?
The severity of CVE-2023-47700 is not explicitly stated, but it involves potential remote spoofing risks affecting trust in network communications.
How do I fix CVE-2023-47700?
To fix CVE-2023-47700, ensure you have the latest security updates installed for IBM Storage Virtualize version 8.6.
Who is affected by CVE-2023-47700?
CVE-2023-47700 affects users of IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem, and IBM Storage Virtualize 8.6 products.
What is the impact of CVE-2023-47700?
CVE-2023-47700 can allow a remote attacker to spoof a trusted system, potentially leading to unauthorized access.
Is CVE-2023-47700 exploited in the wild?
As of the latest information, there are no confirmed reports of active exploitation of CVE-2023-47700.