PT-2013-1930 · Ibm · Ibm San Volume Controller+1

Marcin Mielnoczek · Published 2013-02-19 · Updated 2018-10-30 · CVE-2012-6354

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller and Storwize V7000 versions 6.x before 6.4.1.3

Description The issue allows remote attackers to bypass authentication and obtain superuser access via IP packets. This affects the management GUI of the system.

Recommendations For versions 6.x before 6.4.1.3, update to version 6.4.1.3 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-6354

Affected Products

Ibm San Volume Controller

Storwize V7000

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6354 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80716 · Note