Vulnerability CVE-2018-1495
Published: 2018-05-29

Description:
IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of service. IBM X-Force ID: 141148.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
IBM Flashsystem / Storwize CSRF / Arbitrary File Read / Information Disclosure
Jan Bee
15.05.2018

Type:

CWE-269

 (Improper Privilege Management)

CVSS2 => (AV:N/AC:L/Au:S/C:N/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.5/10
4.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
None
Partial
Partial
Affected software
IBM -> Flashsystem 840 firmware 
IBM -> Flashsystem 900 firmware 

 References:
http://www.ibm.com/support/docview.wss?uid=ssg1S1012280
http://www.ibm.com/support/docview.wss?uid=ssg1S1012281
https://exchange.xforce.ibmcloud.com/vulnerabilities/141148
Copyright 2024, cxsecurity.com

 

Back to Top