2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Mellanox OS LTS"],"product":"Mellanox OS","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.11.2100"}]},{"defaultStatus":"unaffected","product":"ONYX","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.10.4302"}]},{"defaultStatus":"unaffected","platforms":["Skyway"],"product":"Skyway","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 8.2.2100"}]},{"defaultStatus":"unaffected","platforms":["MetroX"],"product":"MetroX-3 XC","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 18.2.2100"}]},{"defaultStatus":"unaffected","platforms":["MetroX"],"product":"MetroX-2","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.11.1000"}]}],"source":"psirt@nvidia.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*","matchCriteriaId":"26CF254C-1556-4D77-9423-C4DD973B8CE5","versionEndExcluding":"3.10.4402","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*","matchCriteriaId":"D34C04D4-8472-4497-8976-A1336CA1730E","versionEndExcluding":"3.11.2002","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*","matchCriteriaId":"6FBAE0EE-CEC8-47B6-80A6-7057432CB808","vulnerable":false},{"criteria":"cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*","matchCriteriaId":"2CFC8AF7-0173-4C62-BCF0-47D8A14F057B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*","matchCriteriaId":"353A9872-AFB8-4242-9942-0E7C4383DD7D","versionEndExcluding":"8.2.2000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*","matchCriteriaId":"06EFCB4A-1688-4C0A-80C8-D1B50BDF5D82","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*","matchCriteriaId":"BD3E5FC6-48B3-4911-92EE-258F5FDE40FC","versionEndExcluding":"18.2.2000","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*","matchCriteriaId":"A48D107C-6629-4954-BE12-F62F6987D45D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*","matchCriteriaId":"8748C387-D070-4E5D-931D-5EEE92E793F4","versionEndExcluding":"3.11.2202","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges."},{"lang":"es","value":"NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 y MetroX-3 XC contienen una vulnerabilidad en el componente LDAP AAA, donde un usuario puede provocar un acceso inadecuado. Una explotación exitosa de esta vulnerabilidad podría conducir a la divulgación de información, la manipulación de datos y la escalada de privilegios."}],"id":"CVE-2024-0104","lastModified":"2026-06-17T06:52:47.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":2.5,"source":"psirt@nvidia.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0104","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-08-08T17:35:12.411213Z","version":"2.0.3"}}]},"published":"2024-08-08T18:15:09.800","references":[{"source":"psirt@nvidia.com","tags":["Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5559"}],"sourceIdentifier":"psirt@nvidia.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"psirt@nvidia.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|