Vulnerability in IBM San Volume Controller Software
CVE-2014-4811
IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.
EPSS: 0.027 (85.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm San_volume_controller_software — versions 6.1.0.0, 6.1.0.1, 6.1.0.2
- Ibm Storwize_v3500
- Ibm Storwize_v3700
- Ibm Storwize_v5000
- Ibm Storwize_v7000
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)