cbcvebase.
CVE-2018-1775
published 2019-02-27

CVE-2018-1775: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to…

medium6.5CVSS 3.0
AVNACLPRLUINSUCHINAN
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

Affected

20 ranges
VendorProductVersion rangeFixed in
ibmflashsystem_9100_family
ibmflashsystem_9100_family
ibmflashsystem_v9000
ibmflashsystem_v9000
ibmsan_volume_controller
ibmsan_volume_controller
ibmspectrum_virtualize_for_public_cloud
ibmspectrum_virtualize_for_public_cloud
ibmspectrum_virtualize_software
ibmspectrum_virtualize_software
ibmspectrum_virtualize_software7.5 – 8.2
ibmspectrum_virtualize_software_for_public_cloud7.5 – 8.2
ibmtorwize_v3500
ibmtorwize_v3500
ibmtorwize_v3700
ibmtorwize_v3700
ibmtorwize_v5000
ibmtorwize_v5000
ibmtorwize_v7000
ibmtorwize_v7000