CVE-2019-4293

概要

参考情報

• securityfocus.com/bid/108445 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/160699 · VDB Entry
• ibm.com/support/docview.wss · Vendor Advisory

storwize unified v7000 software のその他の脆弱性

• CVE-2018-1467高 7.5The IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to unauthenticated users. IBM X-Force ID: 14039…
• CVE-2017-1375高 7.5IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attack…
• CVE-2014-3043中 6.5IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the s…
• CVE-2014-0875低 3.5Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions …
• CVE-2013-6737中 4.0IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encounte…