Ibm

Storwize Unified V7000 Software

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2019-4293

  • EPSS 0.2%
  • Published 20.05.2019 18:29:00
  • Last modified 21.11.2024 04:43:26

IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.

7.5

CVE-2018-1467

  • EPSS 0.3%
  • Published 25.05.2018 14:29:00
  • Last modified 21.11.2024 03:59:53

The IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to unauthenticated users. IBM X-Force ID: 140398.

7.5

CVE-2017-1375

  • EPSS 0.14%
  • Published 24.10.2017 21:29:00
  • Last modified 20.04.2025 01:37:25

IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868.

6.5

CVE-2014-3043

  • EPSS 0.35%
  • Published 19.07.2014 05:09:27
  • Last modified 12.04.2025 10:46:40

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account.

3.5

CVE-2014-0875

  • EPSS 0.14%
  • Published 07.07.2014 11:01:29
  • Last modified 12.04.2025 10:46:40

Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection t...

4

CVE-2013-6737

  • EPSS 0.29%
  • Published 21.06.2014 15:55:03
  • Last modified 12.04.2025 10:46:40

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragment...