IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Storwize V5000
Vendor
IBM
Product
Storwize V5000
Platforms
Unknown
Default status
Unknown
Storwize V5000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
Spectrum Virtualize Software
Vendor
IBM
Product
Spectrum Virtualize Software
Platforms
Unknown
Default status
Unknown
Spectrum Virtualize Software · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
Storwize V3700
Vendor
IBM
Product
Storwize V3700
Platforms
Unknown
Default status
Unknown
Storwize V3700 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
Spectrum Virtualize for Public Cloud
Vendor
IBM
Product
Spectrum Virtualize for Public Cloud
Platforms
Unknown
Default status
Unknown
Spectrum Virtualize for Public Cloud · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
SAN Volume Controller
Vendor
IBM
Product
SAN Volume Controller
Platforms
Unknown
Default status
Unknown
SAN Volume Controller · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
Storwize V7000 (2076)
Vendor
IBM
Product
Storwize V7000 (2076)
Platforms
Unknown
Default status
Unknown
Storwize V7000 (2076) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
1.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
Storwize V3500
Vendor
IBM
Product
Storwize V3500
Platforms
Unknown
Default status
Unknown
Storwize V3500 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4
affected
Unavailable
Unavailable
Unavailable
None listed
7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.5
affected
Unavailable
Unavailable
Unavailable
None listed
7.6
affected
Unavailable
Unavailable
Unavailable
None listed
7.6.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.7
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.1
affected
Unavailable
Unavailable
Unavailable
None listed
7.8
affected
Unavailable
Unavailable
Unavailable
None listed
7.8.1
affected
Unavailable
Unavailable
Unavailable
None listed
8.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.2
affected
Unavailable
Unavailable
Unavailable
None listed
7.3
affected
Unavailable
Unavailable
Unavailable
None listed
7.4
affected
Unavailable
Unavailable
Unavailable
None listed
8.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
FlashSystem V9000
Vendor
IBM
Product
FlashSystem V9000
Platforms
Unknown
Default status
Unknown
FlashSystem V9000 · Scoped product and version facts