Back to feed
EUVD-2018-12045 · Published May 17, 2018
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Technologies
Ibm Storwize V7000 FirmwareIbm Storwize V3500 FirmwareIbm San Volume Controller FirmwareIbm Storwize V7000Ibm Storwize V9000Ibm Storwize V3500Ibm Storwize V3700 FirmwareIbm San Volume ControllerIbm Storwize V3700Ibm Storwize V9000 FirmwareIbm Storwize V5000Ibm Spectrum VirtualizeIbm Storwize V5000 FirmwareIbm Spectrum Virtualize For Public Cloud
Weaknesses
CWE-326
CVSS scores
- v3.15.3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - v2.03.5
AV:N/AC:M/Au:S/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Credential Access
References
Potentially impacted assets
See if this affects your attack surface
