CVE-2018-1775

Published: Feb 27, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

Affected (2)

Products: Ibm: Spectrum Virtualize Software, Spectrum Virtualize Software For Public Cloud

Ibm

2 products

Spectrum Virtualize Software

Spectrum Virtualize Software For Public Cloud

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Virtualize Software	From 7.5 to 8.2

Configuration B

1 vulnerable · 7 platform

Vulnerable Software	Affected Versions
Ibm Spectrum Virtualize Software For Public Cloud	From 7.5 to 8.2

Running on/with	Platform Versions
Ibm Flashsystem V9000	All versions
Ibm Flashsystem V9100	All versions
Ibm San Volume Controller	All versions
Ibm Storwize V3500	All versions
Ibm Storwize V3700	All versions
Ibm Storwize V5000	All versions
Ibm Storwize V7000	All versions