CVE-2018-1775: Infoleak
First published: Wed Feb 27 2019(Updated: )
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Spectrum Virtualize | >=7.5<=8.2 | |
| IBM FlashSystem V9000 | ||
| IBM FlashSystem V9100 Firmware | ||
| IBM SAN Volume Controller Firmware | ||
| IBM Storwize V3500 Firmware | ||
| IBM Storwize V3700 software | ||
| IBM Storwize V5000 software | ||
| IBM Storwize V7000 Firmware | ||
| IBM Spectrum Virtualize software For public cloud | >=7.5<=8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-1775.
What is the severity of CVE-2018-1775?
The severity of CVE-2018-1775 is medium with a severity value of 6.5.
Which IBM products are affected by CVE-2018-1775?
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize, and IBM FlashSystem products versions 7.5 through 8.2 are affected by CVE-2018-1775.
What could an authenticated user do with CVE-2018-1775?
An authenticated user could download arbitrary files from the operating system.
How can I fix CVE-2018-1775?
IBM has provided a security advisory with remediation steps for CVE-2018-1775. Please refer to the IBM support document for detailed instructions.
- agent/type
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm spectrum virtualize
- version/ibm spectrum virtualize/7.5
- version/ibm spectrum virtualize/8.2
- canonical/ibm flashsystem v9000
- canonical/ibm flashsystem v9100 firmware
- canonical/ibm san volume controller firmware
- canonical/ibm storwize v3500 firmware
- canonical/ibm storwize v3700 software
- canonical/ibm storwize v5000 software
- canonical/ibm storwize v7000 firmware
- canonical/ibm spectrum virtualize software for public cloud
- version/ibm spectrum virtualize software for public cloud/7.5
- version/ibm spectrum virtualize software for public cloud/8.2