Към съдържанието
Търсене

CVE-2018-1461: IBM Spectrum Virtualize Software

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140362.

    Засегнати продукти

    • IBM Spectrum Virtualize Software: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1
    • IBM Storwize V5000: 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.2; 7.3; 7.4; 8.1.1
    • IBM Storwize V3500: 6.4; 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 7.2; 7.3; 7.4; 8.1.1
    • IBM Storwize V7000 (2076): 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 1.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 8.1.1
    • IBM Storwize V3700: 7.1; 6.4; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 7.2; 7.3; 7.4; 8.1.1
    • IBM FlashSystem V9000: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1
    • IBM SAN Volume Controller: 6.1; 6.2; 6.3; 6.4; 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1
    • IBM Spectrum Virtualize for Public Cloud: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1

    История

    • 17 май 2018 Публикувано

    Други уязвимости в IBM Spectrum Virtualize Software

    Първоизточници

    CVE-2018-1461: IBM Spectrum Virtualize Software | freedomonline.bg