24 matches found
Security Bulletin: IBM Virtualization Engine TS7700 – Insufficient Restrictions on SSH Users (CVE-2014-3048)
Summary Unprivileged users may be able to invoke privileged commands via SSH. With the right type of network access to the hardware, a skilled user could figure out a way to craft an SSH command to grant themselves privileged access, allowing the user to issue all administrative commands, with th...
Command injection
Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSSC service-user role to enter a crafted SSH command...
CVE-2014-3048
IBM System Storage TS7700 Virtualization Engine (3957‑V06, 3957‑V07, 3957‑VEA, 3957‑VEB) contains a local‑privilege escalation vulnerability (CVE‑2014‑3048) where unprivileged users may invoke privileged SSH commands via the TSSC service user, potentially gaining full administrative access. The I...
