CVE-2023-47715 – IBM Storage Protect Plus Server improper access control

https://notcve.org/view.php?id=CVE-2023-47715

IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538. IBM Storage Protect Plus Server 10.1.0 a 10.1.16 podría permitir que un usuario autenticado con permisos de solo lectura agregue o elimine entradas de una configuración de HyperVisor existente. ID de IBM X-Force: 271538. • https://exchange.xforce.ibmcloud.com/vulnerabilities/271538 https://www.ibm.com/support/pages/node/7144861 • CWE-269: Improper Privilege Management •