Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Administrator password can be reset without authentication on SAN Volume Controller and Storwize Family (CVE-2014-4811) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
The administrator superuser password can be reset to a default value without requiring prior authentication CVE(s): CVE-2014-4811 Affected product(s) and affected version(s): IBM SAN Volume Controller IBM Storwize V7000 IBM Storwize V5000 IBM Storwize V3700 IBM Storwize V3500 All products are affected when running Release 7.2. All 7.2 fix levels starting with 7.2.0.0 and up to but not including version 7.2.0.8 are impacted. No other code releases are vulnerable. Refer to the following More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_administrator_password_can_be_reset_without_authentication_on_san_volume_controller_and_storwize_family_cve_2014_4811?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2014-4811 ,CVE-2014-3515 ,CVE-2014-4049 ,CVE-2014-3981 ,CVE-2014-0238 ,CVE-2014-0237 ,CVE-2014-4721 ,CVE-2014-4670 ,CVE-2014-4698 ,CVE-2014-0221 ,CVE-2014-0224 ,CVE-2014-0195 ,CVE-2014-0198 ,CVE-2010-5298 ,CVE-2014-3470 and CVE-2014-3094. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-09-11 |