CVE Vulnerabilities

CVE-2023-50934

Improper Authentication

Published: Feb 02, 2024 | Modified: Feb 02, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Powersc Ibm 1.3 (including) 1.3 (including)
Powersc Ibm 2.0 (including) 2.0 (including)
Powersc Ibm 2.1 (including) 2.1 (including)

Potential Mitigations

References