CVE-2018-1466 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weak...
MediumCVSS 5.3
EPSS 0.81%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm storwize v7000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v7000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v7000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v7000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v7000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v5000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v5000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v5000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v5000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v5000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v3700 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v3700 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v3700 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v3700 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v3700 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v3500 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v3500 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v3500 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v3500 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v3500 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm storwize v9000 firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm storwize v9000 firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm storwize v9000 firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm storwize v9000 firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm storwize v9000 firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
Show 148 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm san volume controller firmware | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm san volume controller firmware | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm san volume controller firmware | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm san volume controller firmware | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm san volume controller firmware | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm spectrum virtualize | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm spectrum virtualize | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm spectrum virtualize | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm spectrum virtualize | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm spectrum virtualize | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm spectrum virtualize for public cloud | >= 6.1.0.0, < 7.5.0.14 | 7.5.0.14 |
| ibm spectrum virtualize for public cloud | >= 7.7.0.0, < 7.7.1.9 | 7.7.1.9 |
| ibm spectrum virtualize for public cloud | >= 7.8.0.0, < 7.8.1.6 | 7.8.1.6 |
| ibm spectrum virtualize for public cloud | >= 8.1.1.0, < 8.1.1.2 | 8.1.1.2 |
| ibm spectrum virtualize for public cloud | >= 8.1.2.0, < 8.1.2.1 | 8.1.2.1 |
| ibm san volume controller | = 6.1 | No fix listed |
| ibm san volume controller | = 6.2 | No fix listed |
| ibm san volume controller | = 6.3 | No fix listed |
| ibm san volume controller | = 6.4 | No fix listed |
| ibm san volume controller | = 7.1 | No fix listed |
| ibm san volume controller | = 7.5 | No fix listed |
| ibm san volume controller | = 7.6 | No fix listed |
| ibm san volume controller | = 7.6.1 | No fix listed |
| ibm san volume controller | = 7.7 | No fix listed |
| ibm san volume controller | = 7.7.1 | No fix listed |
| ibm san volume controller | = 7.8 | No fix listed |
| ibm san volume controller | = 7.8.1 | No fix listed |
| ibm san volume controller | = 8.1 | No fix listed |
| ibm storwize v5000 | = 7.1 | No fix listed |
| ibm storwize v5000 | = 7.5 | No fix listed |
| ibm storwize v5000 | = 7.6 | No fix listed |
| ibm storwize v5000 | = 7.6.1 | No fix listed |
| ibm storwize v5000 | = 7.7 | No fix listed |
| ibm storwize v5000 | = 7.7.1 | No fix listed |
| ibm storwize v5000 | = 7.8 | No fix listed |
| ibm storwize v5000 | = 7.8.1 | No fix listed |
| ibm storwize v5000 | = 8.1 | No fix listed |
| ibm storwize v5000 | = 6.1 | No fix listed |
| ibm storwize v5000 | = 6.2 | No fix listed |
| ibm storwize v5000 | = 6.3 | No fix listed |
| ibm storwize v5000 | = 6.4 | No fix listed |
| ibm storwize v5000 | = 7.2 | No fix listed |
| ibm storwize v5000 | = 7.3 | No fix listed |
| ibm storwize v5000 | = 7.4 | No fix listed |
| ibm storwize v5000 | = 8.1.1 | No fix listed |
| ibm spectrum virtualize software | = 7.5 | No fix listed |
| ibm spectrum virtualize software | = 7.6 | No fix listed |
| ibm spectrum virtualize software | = 7.6.1 | No fix listed |
| ibm spectrum virtualize software | = 7.7 | No fix listed |
| ibm spectrum virtualize software | = 7.7.1 | No fix listed |
| ibm spectrum virtualize software | = 7.8 | No fix listed |
| ibm spectrum virtualize software | = 7.8.1 | No fix listed |
| ibm spectrum virtualize software | = 8.1 | No fix listed |
| ibm spectrum virtualize software | = 6.1 | No fix listed |
| ibm spectrum virtualize software | = 6.2 | No fix listed |
| ibm spectrum virtualize software | = 6.3 | No fix listed |
| ibm spectrum virtualize software | = 6.4 | No fix listed |
| ibm spectrum virtualize software | = 7.1 | No fix listed |
| ibm spectrum virtualize software | = 7.2 | No fix listed |
| ibm spectrum virtualize software | = 7.3 | No fix listed |
| ibm spectrum virtualize software | = 7.4 | No fix listed |
| ibm spectrum virtualize software | = 8.1.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.2 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.3 | No fix listed |
| ibm Storwize V7000 (2076) | = 6.4 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.2 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.3 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.4 | No fix listed |
| ibm Storwize V7000 (2076) | = 1.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.5 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.6 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.6.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.7 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.7.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.8 | No fix listed |
| ibm Storwize V7000 (2076) | = 7.8.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 8.1 | No fix listed |
| ibm Storwize V7000 (2076) | = 8.1.1 | No fix listed |
| ibm storwize v3700 | = 7.1 | No fix listed |
| ibm storwize v3700 | = 6.4 | No fix listed |
| ibm storwize v3700 | = 7.5 | No fix listed |
| ibm storwize v3700 | = 7.6 | No fix listed |
| ibm storwize v3700 | = 7.6.1 | No fix listed |
| ibm storwize v3700 | = 7.7 | No fix listed |
| ibm storwize v3700 | = 7.7.1 | No fix listed |
| ibm storwize v3700 | = 7.8 | No fix listed |
| ibm storwize v3700 | = 7.8.1 | No fix listed |
| ibm storwize v3700 | = 8.1 | No fix listed |
| ibm storwize v3700 | = 6.1 | No fix listed |
| ibm storwize v3700 | = 6.2 | No fix listed |
| ibm storwize v3700 | = 6.3 | No fix listed |
| ibm storwize v3700 | = 7.2 | No fix listed |
| ibm storwize v3700 | = 7.3 | No fix listed |
| ibm storwize v3700 | = 7.4 | No fix listed |
| ibm storwize v3700 | = 8.1.1 | No fix listed |
| ibm storwize v3500 | = 6.4 | No fix listed |
| ibm storwize v3500 | = 7.1 | No fix listed |
| ibm storwize v3500 | = 7.5 | No fix listed |
| ibm storwize v3500 | = 7.6 | No fix listed |
| ibm storwize v3500 | = 7.6.1 | No fix listed |
| ibm storwize v3500 | = 7.7 | No fix listed |
| ibm storwize v3500 | = 7.7.1 | No fix listed |
| ibm storwize v3500 | = 7.8 | No fix listed |
| ibm storwize v3500 | = 7.8.1 | No fix listed |
| ibm storwize v3500 | = 8.1 | No fix listed |
| ibm storwize v3500 | = 6.1 | No fix listed |
| ibm storwize v3500 | = 6.2 | No fix listed |
| ibm storwize v3500 | = 6.3 | No fix listed |
| ibm storwize v3500 | = 7.2 | No fix listed |
| ibm storwize v3500 | = 7.3 | No fix listed |
| ibm storwize v3500 | = 7.4 | No fix listed |
| ibm storwize v3500 | = 8.1.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.5 | No fix listed |
| ibm FlashSystem V9000 | = 7.6 | No fix listed |
| ibm FlashSystem V9000 | = 7.6.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.7 | No fix listed |
| ibm FlashSystem V9000 | = 7.7.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.8 | No fix listed |
| ibm FlashSystem V9000 | = 7.8.1 | No fix listed |
| ibm FlashSystem V9000 | = 8.1 | No fix listed |
| ibm FlashSystem V9000 | = 6.1 | No fix listed |
| ibm FlashSystem V9000 | = 6.2 | No fix listed |
| ibm FlashSystem V9000 | = 6.3 | No fix listed |
| ibm FlashSystem V9000 | = 6.4 | No fix listed |
| ibm FlashSystem V9000 | = 7.1 | No fix listed |
| ibm FlashSystem V9000 | = 7.2 | No fix listed |
| ibm FlashSystem V9000 | = 7.3 | No fix listed |
| ibm FlashSystem V9000 | = 7.4 | No fix listed |
| ibm FlashSystem V9000 | = 8.1.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.5 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.6 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.6.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.7 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.7.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.8 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.8.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 8.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.2 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.3 | No fix listed |
| ibm spectrum virtualize for public cloud | = 6.4 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.1 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.2 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.3 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.4 | No fix listed |
| ibm spectrum virtualize for public cloud | = 8.1.1 | No fix listed |
References
- www.ibm.com vendor-advisory
- www.ibm.com vendor-advisory
- www.ibm.com vendor-advisory
- 104349 third-party-advisory vdb-entry
- ibm-storwize-cve20181466-info-disc(140397) vdb-entry vendor-advisory