PT-2018-12619

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows an authenticated user to access system files they should not have access to, including deleti...

PT-2018-12625

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows an authenticated user to access system files they should not have access to, some of which...

PT-2018-12616

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality...

CVE-2018-1465: Exposure of Sensitive Information to an Unauthorized Actor

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to obtain the private key which could make intercepting GUI communication...

CVE-2018-1463: Incorrect Authorization

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to access system files they should not have access to some of which could...

PT-2018-12455

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request...

PT-2018-12445

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows unauthorized access to read arbitrary files from the system through the /DownloadFile web...

CVE-2018-1464: Exposure of Sensitive Information to an Unauthorized Actor

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 could allow an authenticated user to obtain sensitive information that they should not have authorization t...

CVE-2018-1466: Inadequate Encryption Strength

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive...

CVE-2018-1434: Cross-Site Request Forgery (CSRF)

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...