CVE-2013-6737

MEDIUM 4.0CVE-2013-6737 · Published 21/06/2014 · updated 17/06/2026

In short

CVE-2013-6737 is a MEDIUM (CVSS 4.0) vulnerability affecting storwize unified v7000 software (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
storwize unified v7000 software ibm	`= 1.3.0.0= 1.3.1.0= 1.4.0.0= 1.4.0.1= 1.4.0.2= 1.4.0.3= 1.4.0.4= 1.4.0.5= 1.4.1.0= 1.4.1.1= 1.4.2.0= 1.4.2.1`	No fix yet

Description

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

References

ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/68133
exchange.xforce.ibmcloud.com/vulnerabilities/89782

More vulnerabilities in storwize unified v7000 software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

storwize unified v7000 software

ibm

= 1.3.0.0= 1.3.1.0= 1.4.0.0= 1.4.0.1= 1.4.0.2= 1.4.0.3= 1.4.0.4= 1.4.0.5= 1.4.1.0= 1.4.1.1= 1.4.2.0= 1.4.2.1

No fix yet

More vulnerabilities in storwize unified v7000 software

See all →