PT-2018-12616

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality...

PT-2018-12445

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows unauthorized access to read arbitrary files from the system through the /DownloadFile web...

PT-2018-12641

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 6.1 through 8.1.1 Description The issue allows an authenticated user to obtain the private key, which could make intercepting GUI...

IBM San Volume Controller / Storwize / FlashSystem 8.1.x < 8.1.0.1 privilege escalation vulnerability

According to its self-reported version number, the IBM San Volume Controller, Storwize or FlashSystem is vulnerable to an unspecified privilege escalation vulnerability within the Service Assistant GUI. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106844;...

Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - lu

Lenovo Security Advisory: LEN-18236 Potential Impact: A vulnerability in the Service Assistant GUI could allow a remote attacker to perform a privilege escalation. Severity: High Scope of Impact: Lenovo Storage/IBM Storwize CVE Identifier: CVE-2017-1710 Summary Description: A vulnerability in the...

Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - Lenovo Support US

No description provided...

CVE-2014-4811

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address...

Design/Logic Flaw

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address...

CVE-2014-4811

Summary (CVE-2014-4811) IBM Storwize family (V3500, V3700, V5000, V7000) and SAN Volume Controller prior to 7.2.0.8 are vulnerable. An unauthorized remote user with network access to the system’s administrative IP can reset the administrator superuser password to a default value via a web browser...

CVE-2014-4811

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address...

PT-2014-6131

Name of the Vulnerable Software and Affected Versions IBM Storwize versions 3500, 3700, 5000, and 7000 SAN Volume Controller versions 6.x through 7.x before 7.2.0.8 Description The issue allows remote attackers to reset the administrator superuser password to its default value via a direct reques...

CVE-2014-4811: Undefined Security Weakness

IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address...

IBM Storwize Authenticated Information Disclosure

The remote Storwize device is a model that is affected by an authenticated information disclosure vulnerability. In the event of a hardware fault, memory contents containing customer data may be written to a file that can be read by an authenticated user of the system who may not otherwise have...

CVE-2014-0880

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...

Code injection

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...

CVE-2014-0880

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...

CVE-2014-0880

CVE-2014-0880 affects IBM SAN Volume Controller and Storwize family (V3500/V3700/V5000/V7000 and Flex System V7000; Lenovo/IBM code lines 6.3–7.2). Root cause: an unauthorized network-grade user can access the system’s administrative IP and gain CLI access, enabling issuance of all administrative...

CVE-2014-0880: Undefined Security Weakness

IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...

PT-2014-3917

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller versions 6.3 through 6.4 before 6.4.1.8 IBM SAN Volume Controller versions 7.1 through 7.2 before 7.2.0.3 Storwize V3500 versions 6.3 through 6.4 before 6.4.1.8 Storwize V3500 versions 7.1 through 7.2 before 7.2.0.3...

Multiple IBM Products CVE-2014-0880 Security Bypass Vulnerability

Description Multiple IBM Products are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions to perform unauthorized actions; this may aid in launching further attacks. The following products are vulnerable: IBM SAN Volume Controller 6.3, 6.4,...