PT-2018-12654 · Ibm · Ibm Storwize V7000 Unified

Jan Bee · Publicado 2018-05-25 · Atualizado 2019-10-09 · CVE-2018-1467

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 Unified management Web interface version 1.6

Description The management Web interface exposes internal cluster details to unauthenticated users, potentially allowing access to sensitive information.

Recommendations For IBM Storwize V7000 Unified management Web interface version 1.6, consider restricting access to the Web interface until a fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1467

Produtos afetados

Ibm Storwize V7000 Unified

Referências · 5

• http://securityfocus.com/bid/104290 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140398 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1467 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ssg1S1012293 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1467 · Nota de Segurança