Description (CNA)
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / SAN Volume Controller | affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1 |
| IBM / Storwize V5000 | affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Spectrum Virtualize Software | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Storwize V7000 (2076) | affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 1.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 8.1.1 |
| IBM / Storwize V3700 | affected 7.1; affected 6.4; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Storwize V3500 | affected 6.4; affected 7.1; affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / FlashSystem V9000 | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
| IBM / Spectrum Virtualize for Public Cloud | affected 7.5; affected 7.6; affected 7.6.1; affected 7.7; affected 7.7.1; affected 7.8; affected 7.8.1; affected 8.1; affected 6.1; affected 6.2; affected 6.3; affected 6.4; affected 7.1; affected 7.2; affected 7.3; affected 7.4; affected 8.1.1 |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/140397
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012282
- http://www.securityfocus.com/bid/104349
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012263
- http://www.ibm.com/support/docview.wss?uid=ssg1S1012283
ADP enrichment
No English description supplied.