medium4.2
CVE-2024-0104
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access.
Impact
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Onyx | before 3.10.4402 |
| Nvidia | Mlnx-Os | before 3.11.2002 before 3.11.2202 |
| Nvidia | Mlnx-Gw | before 8.2.2000 |
| Nvidia | Nvda-Os Xc | before 18.2.2000 |