PT-2013-1930 · Ibm · Ibm San Volume Controller+1

Marcin Mielnoczek · Publicado 2013-02-19 · Atualizado 2018-10-30 · CVE-2012-6354

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller and Storwize V7000 versions 6.x before 6.4.1.3

Description The issue allows remote attackers to bypass authentication and obtain superuser access via IP packets. This affects the management GUI of the system.

Recommendations For versions 6.x before 6.4.1.3, update to version 6.4.1.3 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-6354

Produtos afetados

Ibm San Volume Controller

Storwize V7000

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004277 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80716 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6354 · Nota de Segurança