Description (CNA)
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker to bypass RPCAdapter endpoint authentication by sending a specifically crafted HTTP request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Storage Virtualize | affected 8.5.0.0 through 8.5.0.13; affected 8.5.1.0; affected 8.5.2.0 through 8.5.2.3; affected 8.5.3.0 through 8.5.3.1; affected 8.5.4.0; affected 8.6.0.0 through 8.6.0.5; affected 8.6.1.0; affected 8.6.2.0 through 8.6.2.1; affected 8.6.3.0; affected 8.7.1.0; affected 8.7.2.0 through 8.7.2.1 |
CWE
CWE-288
References
ADP enrichment
No English description supplied.
No references supplied.