Description (CNA)
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Storwize V5000 | affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Spectrum Virtualize Software | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Storwize V3700 | affected 7.1; affected 6.4; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Spectrum Virtualize for Public Cloud | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / SAN Volume Controller | affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1 |
| IBM / Storwize V7000 (2076) | affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 1.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 8.1.1 |
| IBM / Storwize V3500 | affected 6.4; affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / FlashSystem V9000 | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
CWE
No CWE identifiers supplied.
References
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012282
- http://www.securityfocus.com/bid/104349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/140368
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012263
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
ADP enrichment
No English description supplied.