CVE-2018-1775

MEDIO 6.5CVE-2018-1775 · Published 27/02/2019 · updated 17/06/2026

In breve

CVE-2018-1775 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda spectrum virtualize software (ibm), spectrum virtualize software for public cloud (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 80.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
spectrum virtualize software ibm	`≥ 7.5, ≤ 8.2`	No fix yet
spectrum virtualize software for public cloud ibm	`≥ 7.5, ≤ 8.2`	No fix yet

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

References

securityfocus.com/bid/107187 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/148757 · VDB Entry
ibm.com/support/docview.wss · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free