CVE-2018-1434

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

CVE-2018-1463

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to access system files they should not have access to some of which could...

CVE-2018-1462

CVE-2018-1462 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The issue allows an authenticated user to read/write system files they should not access, including deleting files or causing a denial of service. Affected products/versions includ...

CVE-2018-1464

CVE-2018-1464 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products. The connected IBM security bulletins identify that an authenticated user could obtain sensitive information to which they should not have access, with affected code lines spanning ...

CVE-2018-1461

CVE-2018-1461 affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (versions 6.1–8.1.x). The issue is cross-site scripting in the Web UI that lets an attacker embed JavaScript, potentially disclosing credentials within an authenticated session. Aff...

CVE-2018-1465

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem family are affected by CVE-2018-1465. The vulnerability allows an authenticated user to obtain the private key and potentially intercept GUI communications. Affected products include SVC, Storwize V7000/V5000/V37...

CVE-2018-1461

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...

CVE-2018-1464

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to obtain sensitive information that they should not have authorization t...

CA Spectrum Denial of Service Vulnerability

CA Spectrum formerly known as CA Spectrum Infrastructure Manage is a set of converged infrastructure management software developed by CA. The software provides fault management, application performance management and failure cause analysis and other functions. A security vulnerability exists in C...

Design/Logic Flaw

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum vulnerability CVE-2018-6589 affects CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3. The issue allows remote attackers to cause a denial of service via unspecified vectors. The connected sources specify remediation: upgrade to CA Spectrum 10.01.02.PTF_10.1.2...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

PT-2018-17653 · Ca · Ca Spectrum

Name of the Vulnerable Software and Affected Versions: CA Spectrum versions prior to 10.01.02.PTF 10.1.239 CA Spectrum version 10.2.x prior to 10.2.3 Description: The issue allows remote attackers to cause a denial of service via unspecified vectors. Recommendations: For CA Spectrum versions prio...

spectruminvestor.com XSS vulnerability

Open Bug Bounty ID: OBB-600025 Description| Value ---|--- Affected Website:| spectruminvestor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1447

The GSKit IBM Spectrum Protect 7.1 and 7.2 and IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6 CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to...

CVE-2018-1447

The GSKit IBM Spectrum Protect 7.1 and 7.2 and IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6 CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to...

Default credentials

The GSKit IBM Spectrum Protect 7.1 and 7.2 and IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6 CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to...

CVE-2018-1447

CVE-2018-1447 affects the GSKit CMS KDB logic used with IBM Spectrum Protect 7.1/7.2 and IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6, where the hashing process is not salted, yielding weaker password protection and potential password recovery. The vulnerability is discussed in IBM GSKit...