Vulnerability in Ibm Storwize Unified V7000

CVE-2013-6737

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Storwize_unified_v7000
Ibm Storwize_unified_v7000_software — versions 1.3.0.0, 1.3.1.0, 1.4.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)