IBM Spectrum Virtualize information disclosure

Vulnerability

A vulnerability in the IP Quorum feature of IBM Spectrum Virtualize allows an attacker to perform man-in-the-middle (MITM) attacks, leading to disclosure of sensitive information. The issue affects versions 7.8, 8.2, 8.3, 8.4, and 8.5 under specific configurations [1].

Exploitation

An attacker with network access can intercept communications between the management GUI and clients. No authentication or user interaction is required, but the attack complexity is high due to the need for specific network conditions. The attacker must be positioned to perform MITM techniques [1].

Impact

Successful exploitation results in the disclosure of sensitive information, impacting confidentiality. There is no impact on integrity or availability. The CVSS base score is 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) [1].

Mitigation

IBM recommends upgrading to fixed code levels: 8.5.2.0, 8.5.0.6, 8.4.0.9, 8.3.1.9, 8.2.1.16, or 7.8.1.16. Additionally, administrators should request a new system certificate and redeploy the IP Quorum app if the feature is enabled [1].