Security Bulletin: Privileged access can be obtained from IBM Service account on IBM Storwize V7000 Unified (CVE-2014-3043)

Summary A fix is available for IBM Storwize V7000 Unified, for the security issue that privileged access can be obtained from IBM Service account. Vulnerability Details CVEID: CVE-2014-3043 DESCRIPTION: The IBM Storwize V7000 Unified service account can be used to obtain unauthorized privileges o...

CVE-2014-3043

The CVE-2014-3043 issue affects IBM Storwize V7000 Unified, with affected code releases 1.3.x and 1.4.x up to 1.4.3.2. The vulnerability allows remote authenticated users to obtain unauthorized privileges by abusing the IBM service account. IBM security bulletins confirm a fix is available in ver...