PublicCVE

CVE-2023-31025

MEDIUM6.5JSON exportCreate alert

Description

NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.

CVSS breakdown

CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected products

  • NVIDIA / DGX A100All BMC versions prior to 00.22.05 – All BMC versions prior to 00.22.05