CVE-2018-1434

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2018
Source publication: May 17, 2018
Source updated: Sep 17, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FlashSystem V9000

Vendor: IBM
Product: FlashSystem V9000
Platforms: Unknown
Default status: Unknown

FlashSystem V9000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Storwize V3700

Vendor: IBM
Product: Storwize V3700
Platforms: Unknown
Default status: Unknown

Storwize V3700 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Storwize V5000

Vendor: IBM
Product: Storwize V5000
Platforms: Unknown
Default status: Unknown

Storwize V5000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Spectrum Virtualize Software

Vendor: IBM
Product: Spectrum Virtualize Software
Platforms: Unknown
Default status: Unknown

Spectrum Virtualize Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

SAN Volume Controller

Vendor: IBM
Product: SAN Volume Controller
Platforms: Unknown
Default status: Unknown

SAN Volume Controller · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Spectrum Virtualize for Public Cloud

Vendor: IBM
Product: Spectrum Virtualize for Public Cloud
Platforms: Unknown
Default status: Unknown

Spectrum Virtualize for Public Cloud · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Storwize V7000 (2076)

Vendor: IBM
Product: Storwize V7000 (2076)
Platforms: Unknown
Default status: Unknown

Storwize V7000 (2076) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Storwize V3500

Vendor: IBM
Product: Storwize V3500
Platforms: Unknown
Default status: Unknown

Storwize V3500 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.7.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
8.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed