CVE-2014-3077

Published: Sep 15, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file.

Affected (11)

Products: Ibm: Storwize V7000 Unified Software, Storwize Unified V7000

Ibm

2 products

Storwize V7000 Unified Software

Storwize Unified V7000

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Storwize V7000 Unified Software	Version 1.3.0.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.3
Ibm Storwize V7000 Unified Software	Version 1.4.0.0
Ibm Storwize V7000 Unified Software	Version 1.4.0.4
Ibm Storwize V7000 Unified Software	Version 1.4.1.0
Ibm Storwize V7000 Unified Software	Version 1.4.1.1
Ibm Storwize V7000 Unified Software	Version 1.4.2.0
Ibm Storwize V7000 Unified Software	Version 1.4.3.0
Ibm Storwize V7000 Unified Software	Version 1.4.3.3
Ibm Storwize Unified V7000	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004837

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/93906

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004837

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/93906

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.