Ibm · Ibm San Volume Controller · CVE-2018-1433
**Name of the Vulnerable Software and Affected Versions**
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1
**Description**
The issue allows unauthorized access to read arbitrary files from the system through the /DownloadFile web handler, which does not require authentication.
**Recommendations**
For versions 6.1 through 8.1.1, as a temporary workaround, consider restricting access to the /DownloadFile web handler until a patch is available.