PT-2018-12654 · Ibm · Ibm Storwize V7000 Unified

Jan Bee · Published 2018-05-25 · Updated 2019-10-09 · CVE-2018-1467

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 Unified management Web interface version 1.6

Description The management Web interface exposes internal cluster details to unauthenticated users, potentially allowing access to sensitive information.

Recommendations For IBM Storwize V7000 Unified management Web interface version 1.6, consider restricting access to the Web interface until a fix is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1467

Affected Products

Ibm Storwize V7000 Unified

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/140398 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1467 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ssg1S1012293 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1467 · Security Note
• http://securityfocus.com/bid/104290 · Note