CVE-2019-4293

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Storwize V7000 Unified (2073)
Vendor
CVE Published:
20 May 2019

Summary

IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.

Affected Version(s)

Storwize V7000 Unified (2073) 1.6

References

https://www.ibm.com/support/docview.wss?uid=ibm10884656
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/160699
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/108445
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.