CVSS 3.1 Score 4.3 of 10 (medium)


Published Dec 13, 2023
Updated: Dec 19, 2023
CWE ID 200


CVE-2023-49877 is a vulnerability that affects IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED, and 3957-VEC. It allows a remote authenticated user to gain access to sensitive information by exploiting improper filtering of URLs. This vulnerability can be exploited by submitting a specially crafted HTTP GET request, enabling the attacker to view application source code, system configuration information, or other sensitive data related to the Management Interface. The vulnerability has a risk score of 5 and a base severity of MEDIUM. The potential danger to an organization includes potential exposure of confidential data and compromise of system integrity. Remediation should include applying the necessary patches or updates provided by IBM to address the vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-49877 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options