Design/Logic Flaw

2014-06-2115:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.5%

JSON

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

CPENameOperatorVersion
storwize_unified_v7000_softwareeq1.3.0.0
storwize_unified_v7000_softwareeq1.3.1.0
storwize_unified_v7000_softwareeq1.4.0.0
storwize_unified_v7000_softwareeq1.4.0.1
storwize_unified_v7000_softwareeq1.4.0.2
storwize_unified_v7000_softwareeq1.4.0.3
storwize_unified_v7000_softwareeq1.4.0.4
storwize_unified_v7000_softwareeq1.4.0.5
storwize_unified_v7000_softwareeq1.4.1.0
storwize_unified_v7000_softwareeq1.4.1.1

Name	Operator	Version
storwize_unified_v7000_software	eq	1.3.0.0
storwize_unified_v7000_software	eq	1.3.1.0
storwize_unified_v7000_software	eq	1.4.0.0
storwize_unified_v7000_software	eq	1.4.0.1
storwize_unified_v7000_software	eq	1.4.0.2
storwize_unified_v7000_software	eq	1.4.0.3
storwize_unified_v7000_software	eq	1.4.0.4
storwize_unified_v7000_software	eq	1.4.0.5
storwize_unified_v7000_software	eq	1.4.1.0
storwize_unified_v7000_software	eq	1.4.1.1