CVEvulnerability

CVE-2018-1463

6.5 MEDIUM Published 2018-05-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-863

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.

Affected configurations

• ibm storwize v7000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v7000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v7000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v7000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v7000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v5000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v5000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v5000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v5000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v5000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v3700 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v3700 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v3700 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v3700 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v3700 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v3500 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v3500 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v3500 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v3500 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v3500 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v9000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v9000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v9000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v9000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v9000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm san volume controller firmware (>= 6.1.0.0 < 7.5.0.14) • ibm san volume controller firmware (>= 7.7.0.0 < 7.7.1.9) • ibm san volume controller firmware (>= 7.8.0.0 < 7.8.1.6) • ibm san volume controller firmware (>= 8.1.1.0 < 8.1.1.2) • ibm san volume controller firmware (>= 8.1.2.0 < 8.1.2.1) • ibm spectrum virtualize (>= 6.1.0.0 < 7.5.0.14) • ibm spectrum virtualize (>= 7.7.0.0 < 7.7.1.9) • ibm spectrum virtualize (>= 7.8.0.0 < 7.8.1.6) • ibm spectrum virtualize (>= 8.1.1.0 < 8.1.1.2) • ibm spectrum virtualize (>= 8.1.2.0 < 8.1.2.1) • ibm spectrum virtualize for public cloud (>= 6.1.0.0 < 7.5.0.14) • ibm spectrum virtualize for public cloud (>= 7.7.0.0 < 7.7.1.9) • ibm spectrum virtualize for public cloud (>= 7.8.0.0 < 7.8.1.6) • ibm spectrum virtualize for public cloud (>= 8.1.1.0 < 8.1.1.2) • ibm spectrum virtualize for public cloud (>= 8.1.2.0 < 8.1.2.1)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References