NVIDIA Delegated Licensing Service Information Disclosure Vulnerability

A vulnerability in the Delegated Licensing Service (DLS) component of the NVIDIA License System for all appliance platforms allows an authenticated user to perform authorized actions that could lead to unauthorized information disclosure. This vulnerability is present in all versions prior to 3.5.1 and 3.1.7.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially allowing commands to be executed on the system. Additionally, according to NVIDIA, this vulnerability could lead to a denial-of-service condition.

Remediation

Users are advised to update to DLS version 3.5.1 or 3.1.7. For guidance on upgrading an existing DLS virtual appliance, refer to the 'Migrating a DLS Instance' section in the NVIDIA License System User Guide.