CVE-2014-3043: Medium severity ibm storwize unified v7000 vulnerability
Published Jul 19, 2014
·Updated
IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account.
Affected Software
16 affected components
IBM Storwize Unified V7000 Software=1.3.0.0
IBM Storwize Unified V7000 Software=1.3.1.0
IBM Storwize Unified V7000 Software=1.4.0.0
IBM Storwize Unified V7000 Software=1.4.0.1
IBM Storwize Unified V7000 Software=1.4.0.2
IBM Storwize Unified V7000 Software=1.4.0.3
IBM Storwize Unified V7000 Software=1.4.0.4
IBM Storwize Unified V7000 Software=1.4.0.5
IBM Storwize Unified V7000 Software=1.4.1.0
IBM Storwize Unified V7000 Software=1.4.1.1
IBM Storwize Unified V7000 Software=1.4.2.0
IBM Storwize Unified V7000 Software=1.4.2.1
IBM Storwize Unified V7000 Software=1.4.3.0
IBM Storwize Unified V7000 Software=1.4.3.1
IBM Storwize Unified V7000 Software=1.4.3.2
IBM Storwize Unified V7000
Event History
Jul 19, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3043?
CVE-2014-3043 has a medium severity rating, indicating a potential risk of privilege escalation for authenticated users.
2
How do I fix CVE-2014-3043?
To fix CVE-2014-3043, upgrade IBM Storwize V7000 Unified software to version 1.4.3.3 or later.
3
What systems are affected by CVE-2014-3043?
CVE-2014-3043 affects IBM Storwize V7000 Unified software versions 1.3.x and 1.4.x before 1.4.3.3.
4
Can CVE-2014-3043 be exploited remotely?
Yes, CVE-2014-3043 can be exploited remotely by authenticated users to gain elevated privileges.
5
Is there a workaround for CVE-2014-3043?
There is no officially documented workaround for CVE-2014-3043; applying the patch is the recommended approach.