CVEvulnerability

CVE-2018-1466

5.3 MEDIUM Published 2018-05-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-326

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.

Affected configurations

• ibm storwize v7000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v7000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v7000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v7000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v7000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v5000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v5000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v5000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v5000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v5000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v3700 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v3700 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v3700 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v3700 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v3700 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v3500 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v3500 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v3500 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v3500 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v3500 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm storwize v9000 firmware (>= 6.1.0.0 < 7.5.0.14) • ibm storwize v9000 firmware (>= 7.7.0.0 < 7.7.1.9) • ibm storwize v9000 firmware (>= 7.8.0.0 < 7.8.1.6) • ibm storwize v9000 firmware (>= 8.1.1.0 < 8.1.1.2) • ibm storwize v9000 firmware (>= 8.1.2.0 < 8.1.2.1) • ibm san volume controller firmware (>= 6.1.0.0 < 7.5.0.14) • ibm san volume controller firmware (>= 7.7.0.0 < 7.7.1.9) • ibm san volume controller firmware (>= 7.8.0.0 < 7.8.1.6) • ibm san volume controller firmware (>= 8.1.1.0 < 8.1.1.2) • ibm san volume controller firmware (>= 8.1.2.0 < 8.1.2.1) • ibm spectrum virtualize (>= 6.1.0.0 < 7.5.0.14) • ibm spectrum virtualize (>= 7.7.0.0 < 7.7.1.9) • ibm spectrum virtualize (>= 7.8.0.0 < 7.8.1.6) • ibm spectrum virtualize (>= 8.1.1.0 < 8.1.1.2) • ibm spectrum virtualize (>= 8.1.2.0 < 8.1.2.1) • ibm spectrum virtualize for public cloud (>= 6.1.0.0 < 7.5.0.14) • ibm spectrum virtualize for public cloud (>= 7.7.0.0 < 7.7.1.9) • ibm spectrum virtualize for public cloud (>= 7.8.0.0 < 7.8.1.6) • ibm spectrum virtualize for public cloud (>= 8.1.1.0 < 8.1.1.2) • ibm spectrum virtualize for public cloud (>= 8.1.2.0 < 8.1.2.1)

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References