CVE-2012-6354

CVE-2012-6354 affects IBM SAN Volume Controller and Storwize family (V7000, V3500, V3700, and Flex System V7000) where the management GUI on the IP interface allows an unauthenticated user to obtain superuser access. The issue is exploitable by someone with access to the system’s management IP in...

CVE-2014-4811

Summary (CVE-2014-4811) IBM Storwize family (V3500, V3700, V5000, V7000) and SAN Volume Controller prior to 7.2.0.8 are vulnerable. An unauthorized remote user with network access to the system’s administrative IP can reset the administrator superuser password to a default value via a web browser...

CVE-2014-0880

CVE-2014-0880 affects IBM SAN Volume Controller and Storwize family (V3500/V3700/V5000/V7000 and Flex System V7000; Lenovo/IBM code lines 6.3–7.2). Root cause: an unauthorized network-grade user can access the system’s administrative IP and gain CLI access, enabling issuance of all administrative...