CVE-2018-1463

CVE-2018-1463: falha em IBM SAN Volume Controller

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Spectrum Virtualize+ Monitorar FlashSystem

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.4%
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
Produtos afetados
IBM · FlashSystem V9000IBM · SAN Volume ControllerIBM · Spectrum Virtualize for Public CloudIBM · Spectrum Virtualize SoftwareIBM · Storwize V3500IBM · Storwize V3700IBM · Storwize V5000IBM · Storwize V7000 (2076)
CVEs relacionadas — IBM SAN Volume Controller

No mesmo produto, das mais perigosas para as menos.

CVE-2018-1775MEDIUMCVE-2018-1775EPSS 1.9%CVE-2018-1464—CVE-2018-1464EPSS 1.6%CVE-2021-29873HIGHCVE-2021-29873EPSS 1.5%CVE-2018-1465—CVE-2018-1465EPSS 1.3%CVE-2018-1462—CVE-2018-1462EPSS 1.2%CVE-2018-1461—CVE-2018-1461EPSS 1.0%