IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HIBM Flashsystem 9000
HWIbmall versionsIBM Flashsystem 9000 Firmware
OSIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Flashsystem 9100
HWIbmall versionsIBM Flashsystem 9100 Firmware
OSIbm7.8.0.0 – 8.4.0.0 (excl.)IBM San Volume Controller Firmware
OSIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Spectrum Virtualize
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Spectrum Virtualize For Public Cloud
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Storwize V3500 Software
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Storwize V3700 Software
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Storwize V5000 Software
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Storwize V5100 Software
APPIbm7.8.0.0 – 8.4.0.0 (excl.)IBM Storwize V7000 Software
APPIbm7.8.0.0 – 8.4.0.0 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
Related vulnerabilities
CVE-2021-38969CRITICAL9.8PL ✓same product
IBM Spectrum Virtualize — nieautoryzowany dostęp przez ponowne użycie danych uwierzytelniających
CVE-2017-1710CRITICAL9.8PL ✓same product
Privilege escalation w IBM Storwize V7000 Service Assistant GUI
CVE-2020-4686HIGH8.1same product
IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges an...
CVE-2018-1433HIGH7.5same product
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...
CVE-2018-1438HIGH7.5same product
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...