Lucene search

[email protected]NVD:CVE-2018-1433

HistoryMay 17, 2018 - 9:29 p.m.

CVE-2018-1433

2018-05-1721:29:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler /DownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.

Affected configurations

Nvd

Node

ibmstorwize_v7000Match-

AND

ibmstorwize_v7000_firmwareRange6.1.0.0–7.5.0.14

ibmstorwize_v7000_firmwareRange7.7.0.0–7.7.1.9

ibmstorwize_v7000_firmwareRange7.8.0.0–7.8.1.6

ibmstorwize_v7000_firmwareRange8.1.1.0–8.1.1.2

ibmstorwize_v7000_firmwareRange8.1.2.0–8.1.2.1

Node

ibmstorwize_v5000Match-

AND

ibmstorwize_v5000_firmwareRange6.1.0.0–7.5.0.14

ibmstorwize_v5000_firmwareRange7.7.0.0–7.7.1.9

ibmstorwize_v5000_firmwareRange7.8.0.0–7.8.1.6

ibmstorwize_v5000_firmwareRange8.1.1.0–8.1.1.2

ibmstorwize_v5000_firmwareRange8.1.2.0–8.1.2.1

Node

ibmstorwize_v3700Match-

AND

ibmstorwize_v3700_firmwareRange6.1.0.0–7.5.0.14

ibmstorwize_v3700_firmwareRange7.7.0.0–7.7.1.9

ibmstorwize_v3700_firmwareRange7.8.0.0–7.8.1.6

ibmstorwize_v3700_firmwareRange8.1.1.0–8.1.1.2

ibmstorwize_v3700_firmwareRange8.1.2.0–8.1.2.1

Node

ibmstorwize_v3500Match-

AND

ibmstorwize_v3500_firmwareRange6.1.0.0–7.5.0.14

ibmstorwize_v3500_firmwareRange7.7.0.0–7.7.1.9

ibmstorwize_v3500_firmwareRange7.8.0.0–7.8.1.6

ibmstorwize_v3500_firmwareRange8.1.1.0–8.1.1.2

ibmstorwize_v3500_firmwareRange8.1.2.0–8.1.2.1

Node

ibmstorwize_v9000Match-

AND

ibmstorwize_v9000_firmwareRange6.1.0.0–7.5.0.14

ibmstorwize_v9000_firmwareRange7.7.0.0–7.7.1.9

ibmstorwize_v9000_firmwareRange7.8.0.0–7.8.1.6

ibmstorwize_v9000_firmwareRange8.1.1.0–8.1.1.2

ibmstorwize_v9000_firmwareRange8.1.2.0–8.1.2.1

Node

ibmsan_volume_controllerMatch-

AND

ibmsan_volume_controller_firmwareRange6.1.0.0–7.5.0.14

ibmsan_volume_controller_firmwareRange7.7.0.0–7.7.1.9

ibmsan_volume_controller_firmwareRange7.8.0.0–7.8.1.6

ibmsan_volume_controller_firmwareRange8.1.1.0–8.1.1.2

ibmsan_volume_controller_firmwareRange8.1.2.0–8.1.2.1

Node

ibmspectrum_virtualizeRange6.1.0.0–7.5.0.14

ibmspectrum_virtualizeRange7.7.0.0–7.7.1.9

ibmspectrum_virtualizeRange7.8.0.0–7.8.1.6

ibmspectrum_virtualizeRange8.1.1.0–8.1.1.2

ibmspectrum_virtualizeRange8.1.2.0–8.1.2.1

Node

ibmspectrum_virtualize_for_public_cloudRange6.1.0.0–7.5.0.14

ibmspectrum_virtualize_for_public_cloudRange7.7.0.0–7.7.1.9

ibmspectrum_virtualize_for_public_cloudRange7.8.0.0–7.8.1.6

ibmspectrum_virtualize_for_public_cloudRange8.1.1.0–8.1.1.2

ibmspectrum_virtualize_for_public_cloudRange8.1.2.0–8.1.2.1

VendorProductVersionCPE
ibmstorwize_v7000-cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*
ibmstorwize_v7000_firmware*cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:*
ibmstorwize_v5000-cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*
ibmstorwize_v5000_firmware*cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:*
ibmstorwize_v3700-cpe:2.3:h:ibm:storwize_v3700:-:*:*:*:*:*:*:*
ibmstorwize_v3700_firmware*cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:*
ibmstorwize_v3500-cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:*
ibmstorwize_v3500_firmware*cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:*
ibmstorwize_v9000-cpe:2.3:h:ibm:storwize_v9000:-:*:*:*:*:*:*:*
ibmstorwize_v9000_firmware*cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	storwize_v7000	-	cpe:2.3:h:ibm:storwize_v7000:-:::::::*
ibm	storwize_v7000_firmware	*	cpe:2.3:o:ibm:storwize_v7000_firmware::::::::
ibm	storwize_v5000	-	cpe:2.3:h:ibm:storwize_v5000:-:::::::*
ibm	storwize_v5000_firmware	*	cpe:2.3:o:ibm:storwize_v5000_firmware::::::::
ibm	storwize_v3700	-	cpe:2.3:h:ibm:storwize_v3700:-:::::::*
ibm	storwize_v3700_firmware	*	cpe:2.3:o:ibm:storwize_v3700_firmware::::::::
ibm	storwize_v3500	-	cpe:2.3:h:ibm:storwize_v3500:-:::::::*
ibm	storwize_v3500_firmware	*	cpe:2.3:o:ibm:storwize_v3500_firmware::::::::
ibm	storwize_v9000	-	cpe:2.3:h:ibm:storwize_v9000:-:::::::*
ibm	storwize_v9000_firmware	*	cpe:2.3:o:ibm:storwize_v9000_firmware::::::::

Rows per page:

1-10 of 141

References

www.ibm.com/support/docview.wss?uid=ssg1S1012263

www.ibm.com/support/docview.wss?uid=ssg1S1012282

www.ibm.com/support/docview.wss?uid=ssg1S1012283

www.securityfocus.com/bid/104349

exchange.xforce.ibmcloud.com/vulnerabilities/139473

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

Related for NVD:CVE-2018-1433

dsquare1 cvelist1 prion1 cve1 ibm4 zdt1 packetstorm1