CVE-2024-13058

MEDIUM EPSS 32.7%

Published Dec 30, 20241y ago · Modified Jun 17, 20262w ago

4.8 CVSS 4.0

Medium

Published Dec 30, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined storage subsystem. This issue only impacts SoftIron HyperCloud and related software products (such as VM Squared) software versions 2.3.0 to before 2.5.0.

CVSS Details

Base Score

4.8

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Green

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction A

Scope N

Threat Intelligence

EPSS Exploit Probability

32.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 3

CWE-269 Improper Privilege Management Authorization

CWE-285

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

References 1

advisories.softiron.cloud https://advisories.softiron.cloud/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.