CVE-2018-1464 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could a...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm storwize v7000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v7000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v7000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v7000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v7000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v5000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v5000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v5000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v5000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v5000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v3700 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v3700 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v3700 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v3700 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v3700 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v3500 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v3500 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v3500 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v3500 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v3500 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v9000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v9000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v9000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v9000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v9000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
Show 148 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm san volume controller firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm san volume controller firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm san volume controller firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm san volume controller firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm san volume controller firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm spectrum virtualize | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm spectrum virtualize | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm spectrum virtualize | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm spectrum virtualize | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm spectrum virtualize | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm spectrum virtualize for public cloud | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm spectrum virtualize for public cloud | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm spectrum virtualize for public cloud | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm spectrum virtualize for public cloud | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm spectrum virtualize for public cloud | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v5000 | = 7.1 | No fix listed |
| ibm storwize v5000 | = 7.5 | No fix listed |
| ibm storwize v5000 | = 7.6 | No fix listed |
| ibm storwize v5000 | = 7.6.1 | No fix listed |
| ibm storwize v5000 | = 7.7 | No fix listed |
| ibm storwize v5000 | = 7.7.1 | No fix listed |
| ibm storwize v5000 | = 7.8 | No fix listed |
| ibm storwize v5000 | = 7.8.1 | No fix listed |
| ibm storwize v5000 | = 8.1 | No fix listed |
| ibm storwize v5000 | = 6.1 | No fix listed |
| ibm storwize v5000 | = 6.2 | No fix listed |
| ibm storwize v5000 | = 6.3 | No fix listed |
| ibm storwize v5000 | = 6.4 | No fix listed |
| ibm storwize v5000 | = 7.2 | No fix listed |
| ibm storwize v5000 | = 7.3 | No fix listed |
| ibm storwize v5000 | = 7.4 | No fix listed |
| ibm storwize v5000 | = 8.1.1 | No fix listed |
| ibm spectrum virtualize software | = 7.5 | No fix listed |
| ibm spectrum virtualize software | = 7.6 | No fix listed |
| ibm spectrum virtualize software | = 7.6.1 | No fix listed |
| ibm spectrum virtualize software | = 7.7 | No fix listed |
| ibm spectrum virtualize software | = 7.7.1 | No fix listed |
| ibm spectrum virtualize software | = 7.8 | No fix listed |
| ibm spectrum virtualize software | = 7.8.1 | No fix listed |
| ibm spectrum virtualize software | = 8.1 | No fix listed |
| ibm spectrum virtualize software | = 6.1 | No fix listed |
| ibm spectrum virtualize software | = 6.2 | No fix listed |
| ibm spectrum virtualize software | = 6.3 | No fix listed |
| ibm spectrum virtualize software | = 6.4 | No fix listed |
| ibm spectrum virtualize software | = 7.1 | No fix listed |
| ibm spectrum virtualize software | = 7.2 | No fix listed |
| ibm spectrum virtualize software | = 7.3 | No fix listed |
| ibm spectrum virtualize software | = 7.4 | No fix listed |
| ibm spectrum virtualize software | = 8.1.1 | No fix listed |
| ibm storwize v3500 | = 6.4 | No fix listed |
| ibm storwize v3500 | = 7.1 | No fix listed |
| ibm storwize v3500 | = 7.5 | No fix listed |
| ibm storwize v3500 | = 7.6 | No fix listed |
| ibm storwize v3500 | = 7.6.1 | No fix listed |
| ibm storwize v3500 | = 7.7 | No fix listed |
| ibm storwize v3500 | = 7.7.1 | No fix listed |
| ibm storwize v3500 | = 7.8 | No fix listed |
| ibm storwize v3500 | = 7.8.1 | No fix listed |
| ibm storwize v3500 | = 8.1 | No fix listed |
| ibm storwize v3500 | = 6.1 | No fix listed |
| ibm storwize v3500 | = 6.2 | No fix listed |
| ibm storwize v3500 | = 6.3 | No fix listed |
| ibm storwize v3500 | = 7.2 | No fix listed |
| ibm storwize v3500 | = 7.3 | No fix listed |
| ibm storwize v3500 | = 7.4 | No fix listed |
| ibm storwize v3500 | = 8.1.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.2 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.3 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.4 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.2 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.3 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.4 | No fix listed |
| ibm Storwize V7000 (2076) | = 1.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.5 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.6 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.6.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.7 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.7.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.8 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.8.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 8.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 8.1.1 | No fix listed |
| ibm storwize v3700 | = 7.1 | No fix listed |
| ibm storwize v3700 | = 6.4 | No fix listed |
| ibm storwize v3700 | = 7.5 | No fix listed |
| ibm storwize v3700 | = 7.6 | No fix listed |
| ibm storwize v3700 | = 7.6.1 | No fix listed |
| ibm storwize v3700 | = 7.7 | No fix listed |
| ibm storwize v3700 | = 7.7.1 | No fix listed |
| ibm storwize v3700 | = 7.8 | No fix listed |
| ibm storwize v3700 | = 7.8.1 | No fix listed |
| ibm storwize v3700 | = 8.1 | No fix listed |
| ibm storwize v3700 | = 6.1 | No fix listed |
| ibm storwize v3700 | = 6.2 | No fix listed |
| ibm storwize v3700 | = 6.3 | No fix listed |
| ibm storwize v3700 | = 7.2 | No fix listed |
| ibm storwize v3700 | = 7.3 | No fix listed |
| ibm storwize v3700 | = 7.4 | No fix listed |
| ibm storwize v3700 | = 8.1.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.5 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.6 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.6.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.7 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.7.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.8 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.8.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 8.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.2 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.3 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.4 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.2 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.3 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.4 | No fix listed |
| ibm spectrum virtualize for public cloud | = 8.1.1 | No fix listed |
| ibm san volume controller | = 6.1 | No fix listed |
| ibm san volume controller | = 6.2 | No fix listed |
| ibm san volume controller | = 6.3 | No fix listed |
| ibm san volume controller | = 6.4 | No fix listed |
| ibm san volume controller | = 7.1 | No fix listed |
| ibm san volume controller | = 7.5 | No fix listed |
| ibm san volume controller | = 7.6 | No fix listed |
| ibm san volume controller | = 7.6.1 | No fix listed |
| ibm san volume controller | = 7.7 | No fix listed |
| ibm san volume controller | = 7.7.1 | No fix listed |
| ibm san volume controller | = 7.8 | No fix listed |
| ibm san volume controller | = 7.8.1 | No fix listed |
| ibm san volume controller | = 8.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.5 | No fix listed |
| ibm FlashSystem V9000 | = 7.6 | No fix listed |
| ibm FlashSystem V9000 | = 7.6.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.7 | No fix listed |
| ibm FlashSystem V9000 | = 7.7.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.8 | No fix listed |
| ibm FlashSystem V9000 | = 7.8.1 | No fix listed |
| ibm FlashSystem V9000 | = 8.1 | No fix listed |
| ibm FlashSystem V9000 | = 6.1 | No fix listed |
| ibm FlashSystem V9000 | = 6.2 | No fix listed |
| ibm FlashSystem V9000 | = 6.3 | No fix listed |
| ibm FlashSystem V9000 | = 6.4 | No fix listed |
| ibm FlashSystem V9000 | = 7.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.2 | No fix listed |
| ibm FlashSystem V9000 | = 7.3 | No fix listed |
| ibm FlashSystem V9000 | = 7.4 | No fix listed |
| ibm FlashSystem V9000 | = 8.1.1 | No fix listed |
References
- www.ibm.com vendor-advisory
- www.ibm.com vendor-advisory
- www.ibm.com vendor-advisory
- 104349 third-party-advisory vdb-entry
- ibm-storwize-cve20181464-info-disc(140395) vdb-entry vendor-advisory