Code injection

IBM System Storage Storwize V7000 Unified V7000U 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868...

CVE-2017-1375

CVE-2017-1375 affects IBM Storwize V7000 Unified (V7000U) 1.5 to 1.6, where use of weaker cryptographic algorithms could allow an attacker to decrypt highly sensitive information. IBM’s bulletin notes that a fix is available in v1.6.2.0 (1.5 is EOS); apply the upgrade to mitigate. The issue is do...

CVE-2014-3077

IBM SONAS and System Storage Storwize V7000 Unified (V7000U) 1.3.x and 1.4.x before 1.4.3.4 are affected by CVE-2014-3077, where the chkauth password is stored in the audit log. This enables a local attacker to read the log and obtain sensitive information. IBM security bulletins (CVE-2014-3077) ...