CVE-2012-6354: High severity ibm san volume controller vulnerability
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6354?
CVE-2012-6354 is classified as a high severity vulnerability due to its potential for remote unauthenticated access to superuser accounts.
How do I fix CVE-2012-6354?
To fix CVE-2012-6354, update the IBM SAN Volume Controller or Storwize V7000 to version 6.4.1.3 or later.
Which products are affected by CVE-2012-6354?
CVE-2012-6354 affects IBM SAN Volume Controller software versions 6.1.0.0 to 6.4.0.0 and IBM Storwize V7000 firmware.
Can CVE-2012-6354 be exploited remotely?
Yes, CVE-2012-6354 can be exploited remotely, allowing attackers to bypass authentication and gain superuser access.
What are the potential impacts of CVE-2012-6354?
The potential impacts of CVE-2012-6354 include unauthorized access and control over the storage environment, leading to data breaches.