NVIDIA Delegated Licensing Service Improper Authentication Vulnerability Leading to Information Disclosure

A vulnerability exists in the Delegated Licensing Service (DLS) component of the NVIDIA License System, applicable to all appliance platforms. The issue stems from improper authentication, which an attacker could exploit. Successful exploitation may result in unauthorized information disclosure.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users can upgrade to DLS version 3.6 or 3.1.8 to address this vulnerability. For existing DLS virtual appliances, follow the instructions in the NVIDIA License System User Guide on migrating a DLS instance.