CVE-2014-0875: Low severity ibm storwize unified v7000 vulnerability
Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0875?
CVE-2014-0875 is classified as a high severity vulnerability due to its ability to allow remote attackers to bypass access control restrictions.
How do I fix CVE-2014-0875?
To fix CVE-2014-0875, upgrade your IBM Storwize V7000 Unified software to the latest version that has addressed this vulnerability.
What is affected by CVE-2014-0875?
CVE-2014-0875 affects IBM Storwize Unified V7000 Software versions 1.3.0.0 through 1.4.3.x.
Can CVE-2014-0875 be exploited remotely?
Yes, CVE-2014-0875 can be exploited remotely, allowing unauthorized access to systems via improper ACL synchronization.
Is CVE-2014-0875 unique to IBM Storwize V7000?
Yes, CVE-2014-0875 is specific to IBM Storwize V7000 Unified systems and their handling of ACLs over unreliable NFS connections.