PT-2019-17017 · Ibm · Ibm Storwize V7000 Unified

Published 2019-05-20 · Updated 2023-02-03 · CVE-2019-4293

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 Unified (2073) version 1.6

Description The issue allows an attacker to reveal the server version in a default installation, which could be used in further attacks against the system.

Recommendations For IBM Storwize V7000 Unified (2073) version 1.6, consider changing the default configuration to conceal the server version, as a temporary workaround, until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-4293

Affected Products

Ibm Storwize V7000 Unified

References · 5

• https://osv.dev/vulnerability/CVE-2019-4293 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10884656 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4293 · Security Note
• http://securityfocus.com/bid/108445 · Note