PT-2014-3912 · Ibm · Ibm Storwize V7000 Unified

Publicado 2014-07-07 · Atualizado 2017-01-07 · CVE-2014-0875

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 Unified versions 1.3.0.0 through 1.4.3.x

Description The issue allows remote attackers to bypass intended ACL restrictions under certain circumstances. This is achieved by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.

Recommendations For versions 1.3.0.0 through 1.4.3.x, consider restricting access to the NFS connection to minimize the risk of exploitation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0875

Produtos afetados

Ibm Storwize V7000 Unified

Referências · 3

• http://ibm.com/support/docview.wss?uid=ssg1S1004738 · Aviso do Fabricante
• http://securityfocus.com/bid/68398 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0875 · Nota de Segurança