Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.
Засегнати продукти
- IBM Storwize V5000: 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.2; 7.3; 7.4; 8.1.1
- IBM Spectrum Virtualize Software: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1
- IBM Storwize V3500: 6.4; 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 7.2; 7.3; 7.4; 8.1.1
- IBM Storwize V7000 (2076): 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 1.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 8.1.1
- IBM Storwize V3700: 7.1; 6.4; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 7.2; 7.3; 7.4; 8.1.1
- IBM Spectrum Virtualize for Public Cloud: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1
- IBM SAN Volume Controller: 6.1; 6.2; 6.3; 6.4; 7.1; 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1
- IBM FlashSystem V9000: 7.5; 7.6; 7.6.1; 7.7; 7.7.1; 7.8; 7.8.1; 8.1; 6.1; 6.2; 6.3; 6.4; 7.1; 7.2; 7.3; 7.4; 8.1.1
История
- 17 май 2018 Публикувано
Други уязвимости в IBM Storwize V5000
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2018-1464
- https://nvd.nist.gov/vuln/detail/CVE-2018-1464
- https://exchange.xforce.ibmcloud.com/vulnerabilities/140395
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012282
- http://www.securityfocus.com/bid/104349
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012263
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012283