CVE-2012-6354 The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm san volume controller software | = 6.1.0.0 | No fix listed |
| ibm san volume controller software | = 6.2.0.0 | No fix listed |
| ibm san volume controller software | = 6.3.0.0 | No fix listed |
| ibm san volume controller software | = 6.4.0.0 | No fix listed |
| ibm storwize v7000 | All versions | No fix listed |
References
- www-01.ibm.com vendor-advisory
- systemstorage-san-auth-bypass(80716) vdb-entry