Security Bulletin: Administrator password can be reset without authentication on SAN Volume Controller and Storwize Family (CVE-2014-4811)

Summary Security Bulletin: Administrator password can be reset without authentication on SAN Volume Controller and Storwize Family CVE-2014-4811 Vulnerability Details Security Bulletin --- Summary --- The administrator superuser password can be reset to a default value without requiring prior...

CVE-2014-4811

Summary (CVE-2014-4811) IBM Storwize family (V3500, V3700, V5000, V7000) and SAN Volume Controller prior to 7.2.0.8 are vulnerable. An unauthorized remote user with network access to the system’s administrative IP can reset the administrator superuser password to a default value via a web browser...