NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
History

Wed, 11 Sep 2024 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia metrox-2
Nvidia metrox-3 Xc
Nvidia mlnx-gw
Nvidia mlnx-os
Nvidia nvda-os Xc
Nvidia onyx
Nvidia skyway
Weaknesses NVD-CWE-Other
CPEs cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:lts:*:*:*
cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*
Vendors & Products Nvidia
Nvidia metrox-2
Nvidia metrox-3 Xc
Nvidia mlnx-gw
Nvidia mlnx-os
Nvidia nvda-os Xc
Nvidia onyx
Nvidia skyway

Thu, 08 Aug 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 08 Aug 2024 17:30:00 +0000

Type Values Removed Values Added
Description NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
Weaknesses CWE-284
References
Metrics cvssV3_1

{'score': 4.2, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2024-08-08T17:15:19.315Z

Updated: 2024-08-08T17:35:33.292Z

Reserved: 2023-12-02T00:42:14.023Z

Link: CVE-2024-0104

cve-icon Vulnrichment

Updated: 2024-08-08T17:35:26.967Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-08T18:15:09.800

Modified: 2024-09-11T17:40:35.430

Link: CVE-2024-0104

cve-icon Redhat

No data.