Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-0104 EUVD-2024-15905GHSA-whp7-r8fh-f38c

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improp…

Published Aug 8, 2024 · Updated Aug 8, 2024 · Assigned by nvidia

Description

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected products

VendorProductAffectedFixed
NVIDIA Mellanox OS All versions prior to and including 3.11.2100 —
NVIDIA ONYX All versions prior to and including 3.10.4302 —
NVIDIA Skyway All versions prior to and including 8.2.2100 —
NVIDIA MetroX-3 XC All versions prior to and including 18.2.2100 —
NVIDIA MetroX-2 All versions prior to and including 3.11.1000 —

References