Cross-Site Request Forgery Vulnerability in IBM Storage Solutions
CVE-2018-1434

8.8HIGH

Key Information:

Vendor

IBM
Status
Flashsystem V9000
Storwize V3700
Storwize V5000
Spectrum Virtualize Software
Vendor
CVE Published:
17 May 2018

What is CVE-2018-1434?

IBM storage solutions, including the SAN Volume Controller, Storwize, Spectrum Virtualize, and FlashSystem, are vulnerable to a cross-site request forgery. This flaw allows attackers to execute unauthorized actions by sending requests from trusted users. Effective mitigation measures are recommended to address this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FlashSystem V9000 7.5

FlashSystem V9000 7.6

FlashSystem V9000 7.6.1

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1012282
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/139474
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/104349
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.