CVE Vulnerabilities

CVE-2013-6737

Published: Jun 21, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

Affected Software

Name Vendor Start Version End Version
Storwize_unified_v7000_software Ibm 1.3.0.0 (including) 1.3.0.0 (including)
Storwize_unified_v7000_software Ibm 1.3.1.0 (including) 1.3.1.0 (including)
Storwize_unified_v7000_software Ibm 1.4.0.0 (including) 1.4.0.0 (including)
Storwize_unified_v7000_software Ibm 1.4.0.1 (including) 1.4.0.1 (including)
Storwize_unified_v7000_software Ibm 1.4.0.2 (including) 1.4.0.2 (including)
Storwize_unified_v7000_software Ibm 1.4.0.3 (including) 1.4.0.3 (including)
Storwize_unified_v7000_software Ibm 1.4.0.4 (including) 1.4.0.4 (including)
Storwize_unified_v7000_software Ibm 1.4.0.5 (including) 1.4.0.5 (including)
Storwize_unified_v7000_software Ibm 1.4.1.0 (including) 1.4.1.0 (including)
Storwize_unified_v7000_software Ibm 1.4.1.1 (including) 1.4.1.1 (including)
Storwize_unified_v7000_software Ibm 1.4.2.0 (including) 1.4.2.0 (including)
Storwize_unified_v7000_software Ibm 1.4.2.1 (including) 1.4.2.1 (including)

References