CVE-2018-1461

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...

CVE-2018-1438

CVE-2018-1438 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The vulnerability arises in the web handler /DLSnap, permitting an unauthenticated attacker to read arbitrary files on the system. Affected code branches include IBM SVC/Storwize/S...

CVE-2018-1465

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem family are affected by CVE-2018-1465. The vulnerability allows an authenticated user to obtain the private key and potentially intercept GUI communications. Affected products include SVC, Storwize V7000/V5000/V37...

CVE-2018-1462

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to access system files they should not have access to including deleting...

CVE-2018-1462

CVE-2018-1462 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The issue allows an authenticated user to read/write system files they should not access, including deleting files or causing a denial of service. Affected products/versions includ...

CVE-2018-1461

CVE-2018-1461 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (versions 6.1–8.1.x). The issue is cross-site scripting in the Web UI that lets an attacker embed JavaScript, potentially disclosing credentials within an authenticated session. Aff...

CVE-2018-1438

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 web handler /DLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM...

CVE-2018-1464

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to obtain sensitive information that they should not have authorization t...

CVE-2018-1464

CVE-2018-1464 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The connected IBM security bulletins identify that an authenticated user could obtain sensitive information to which they should not have access, with affected code lines spanning ...

IBM Storwize / FlashSystem Detection (HTTP)

HTTP based detection of IBM Storwize / FlashSystem. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Flashsystem / Storwize CSRF / Arbitrary File Read / Information Disclosure Vulnerabilities

Vulnerabilities were identified in the IBM Flashsystem 840, IBM Flashsystem 900 and IBM Storwize V7000. They include cross site request forgery, arbitrary file read, unauthenticated access, and various other vulnerabilities. Vulnerabilities in IBMs Flashsystems and Storwize Products...

IBM Flashsystem / Storwize CSRF / Arbitrary File Read / Information Disclosure

Vulnerabilities in IBMs Flashsystems and Storwize Products ------------------------------------------------------------------------- Introduction ============ Vulnerabilities were identified in the IBM Flashsystem 840, IBM Flashsystem 900 and IBM Storwize V7000. These were discovered during a bla...

IBM San Volume Controller / Storwize / FlashSystem 8.1.x < 8.1.0.1 privilege escalation vulnerability

According to its self-reported version number, the IBM San Volume Controller, Storwize or FlashSystem is vulnerable to an unspecified privilege escalation vulnerability within the Service Assistant GUI. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106844;...

Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - lu

Lenovo Security Advisory: LEN-18236 Potential Impact: A vulnerability in the Service Assistant GUI could allow a remote attacker to perform a privilege escalation. Severity: High Scope of Impact: Lenovo Storage/IBM Storwize CVE Identifier: CVE-2017-1710 Summary Description: A vulnerability in the...

Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - Lenovo Support NL

No description provided...

CVE-2017-1710

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

Privilege escalation

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

CVE-2017-1710

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

CVE-2017-1710

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

CVE-2017-1710

/*** Mode C: Normal (concrete details available from connected IBM bulletin) /The vulnerability CVE-2017-1710 affects the IBM Storwize family where the Service Assistant GUI can allow remote privilege escalation. Affected products include IBM SAN Volume Controller, IBM Storwize V7000, Storwize V5...