A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HIBM Flashsystem V9000
HWIbmall versionsIBM Flashsystem V9000 Firmware
OSIbm8.1IBM San Volume Controller
HWIbmall versionsIBM San Volume Controller Firmware
OSIbm8.1IBM Storwize V5000
HWIbmall versionsIBM Storwize V5000 Firmware
OSIbm8.1IBM Storwize V7000
HWIbmall versionsIBM Storwize V7000 Firmware
OSIbm8.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
References
Related vulnerabilities
CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same product
RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)
CVE-2021-29873HIGH8.1same product
IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial ...
CVE-2020-4686HIGH8.1same product
IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges an...
CVE-2018-1434HIGH8.8same product
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...
CVE-2018-1433HIGH7.5same product
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...