NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
| Software | From | Fixed in |
|---|---|---|
| nvidia / onyx | - | 3.10.4402 |
| nvidia / mlnx-os | - | 3.11.2002 |
| nvidia / mlnx-gw | - | 8.2.2000 |
| nvidia / nvda-os_xc | - | 18.2.2000 |
| nvidia / mlnx-os | - | 3.11.2202 |