CVE-2018-1434

2018-05-1400:00:00
ibm
www.cve.org
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.2%
JSON
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474.
CNA Affected

[
  {
    "product": "FlashSystem V9000",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "Storwize V3700",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "Storwize V5000",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "Spectrum Virtualize Software",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "SAN Volume Controller",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      }
    ]
  },
  {
    "product": "Spectrum Virtualize for Public Cloud",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "Storwize V7000 (2076)",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "1.1"
      },
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  },
  {
    "product": "Storwize V3500",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.5"
      },
      {
        "status": "affected",
        "version": "7.6"
      },
      {
        "status": "affected",
        "version": "7.6.1"
      },
      {
        "status": "affected",
        "version": "7.7"
      },
      {
        "status": "affected",
        "version": "7.7.1"
      },
      {
        "status": "affected",
        "version": "7.8"
      },
      {
        "status": "affected",
        "version": "7.8.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      },
      {
        "status": "affected",
        "version": "6.1"
      },
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      },
      {
        "status": "affected",
        "version": "7.4"
      },
      {
        "status": "affected",
        "version": "8.1.1"
      }
    ]
  }
]