IBM SAS Connectivity and SAS RAID Controller Modules CVE-2014-3019 Unauthorized Access Vulnerability

Bugtraq ID:	74327
Class:	Design Error
CVE:	CVE-2014-3019
Remote:	Yes
Local:	No
Published:	Jan 07 2015 12:00AM
Updated:	Jan 07 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM SAS RAID Module Firmware 1.3.3.004 IBM SAS Connectivity Module 1.3.3.004
Not Vulnerable:	IBM SAS RAID Module Firmware 1.3.3.006 IBM SAS Connectivity Module 1.3.3.006

IBM SAS Connectivity and SAS RAID Controller Modules CVE-2014-3019 Unauthorized Access Vulnerability

IBM SAS Connectivity module and SAS RAID Controller module are prone to an unauthorized-access vulnerability.

An attacker can exploit this issue to gain unauthorized access to the affected application. This may aid in further attacks.

IBM SAS Connectivity and SAS RAID Controller Modules CVE-2014-3019 Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM SAS Connectivity and SAS RAID Controller Modules CVE-2014-3019 Unauthorized Access Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: BladeCenter SAS RAID Module (RSSM) are affected by two vulner (IBM)