CVE-2013-0500

Published: Oct 17, 2013Modified: Apr 29, 2026

5.4

Vector

AV:N/AC:M/Au:M/C:P/I:P/A:P

Exploitability: 5.5 / Impact: 6.4

Source: NVD

Description

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation.

Affected (8)

Products: Ibm: Storwize V7000 Unified Software, Storwize V7000 Unified

Ibm

2 products

Storwize V7000 Unified Software

Storwize V7000 Unified

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Storwize V7000 Unified Software	Version 1.3.0.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.3
Ibm Storwize V7000 Unified Software	Version 1.4.0.0
Ibm Storwize V7000 Unified Software	Version 1.4.0.4
Ibm Storwize V7000 Unified Software	Version 1.4.1.0
Ibm Storwize V7000 Unified Software	Version 1.4.1.1
Ibm Storwize V7000 Unified	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.ibm.com/support/docview.wss?uid=ssg1S1004430

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84839

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=ssg1S1004430

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84839

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.