CVE-2013-0497: IBM SONAS and Storwize V7000 GUI authentication session hijacking

The IBM SONAS GUI vulnerability CVE-2013-0497 stems from not invalidating the session cookie after a user logs out, enabling a potentially authenticated session holder to access the GUI even after termination. Affected products include SONAS, specifically all 1.3.x.x and 1.4.0.x releases. The iss...

Information disclosure

IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...

CVE-2012-0706

IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...

CVE-2012-0706

IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...

CVE-2012-0706

CVE-2012-0706 affects IBM Scale Out NAS (SONAS) 1.3 prior to 1.3.2.3. The embedded LDAP client stores LDAP bind DN and password in cleartext on the local filesystem, enabling an attacker with root access to obtain credentials and potentially access the external LDAP server. IBM notes no vendor fi...

CVE-2012-2163

IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...

Code injection

IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...

CVE-2012-2163

IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...

CVE-2012-2163

CVE-2012-2163 affects IBM SONAS 1.1–1.3.1, where an error in the Command Line Interface and Graphical User Interface allows an administrative user to execute arbitrary Linux commands as root via code injection. The IBM flash notes a base CVSS score of 9 and describes impact as enabling command ex...