CVE-2023-25681

6.5 mediumEPSS 0.6%

Medium (6.5) in ibm spectrum virtualize. EPSS 0.6% chance of exploitation in the next 30 days.

LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-308
Published: 2024-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:spectrum_virtualize

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/247033
https://www.ibm.com/support/pages/node/6962203
https://exchange.xforce.ibmcloud.com/vulnerabilities/247033
https://www.ibm.com/support/pages/node/6962203

Check your stack JSON