Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.
Published: 2018-05-17
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2018-12012 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.
History

No history.

Subscriptions

Ibm San Volume Controller San Volume Controller Firmware Spectrum Virtualize Spectrum Virtualize For Public Cloud Storwize V3500 Storwize V3500 Firmware Storwize V3700 Storwize V3700 Firmware Storwize V5000 Storwize V5000 Firmware Storwize V7000 Storwize V7000 Firmware Storwize V9000 Storwize V9000 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2024-08-05T03:59:39.074Z

Reserved: 2017-12-13T00:00:00.000Z

Link: CVE-2018-1433

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-05-17T21:29:00.243

Modified: 2024-11-21T03:59:48.683

Link: CVE-2018-1433

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses