IBM Storwize V7000 Unified CVE-2018-1467 Information Disclosure Vulnerability

Bugtraq ID:	104290
Class:	Input Validation Error
CVE:	CVE-2018-1467
Remote:	Yes
Local:	No
Published:	May 22 2018 12:00AM
Updated:	May 22 2018 12:00AM
Credit:	Jan Beer
Vulnerable:	IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 3 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.6.2.3 IBM Storwize V7000 Unified 1.6.2.0 IBM Storwize V7000 Unified 1.6.1.0 IBM Storwize V7000 Unified 1.6.0.1 IBM Storwize V7000 Unified 1.6.0.0 IBM Storwize V7000 Unified 1.5 IBM Storwize V7000 Unified 1.4.3.6 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Storwize V7000 Unified 1.3
Not Vulnerable:	IBM Storwize V7000 Unified 1.6.2.4

IBM Storwize V7000 Unified CVE-2018-1467 Information Disclosure Vulnerability

IBM Storwize V7000 Unified is prone to an information-disclosure vulnerability.

Successful exploits may allow an attacker to obtain sensitive information that may lead to further attacks.

Storwize V7000 Unified 1.6.0.0 through 1.6.2.3, and 1.5 and prior are vulnerable.

IBM Storwize V7000 Unified CVE-2018-1467 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Storwize V7000 Unified CVE-2018-1467 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Multiple vulnerabilities affect the IBM Storwize V7000 (IBM)