IBM Security Bulletin: Administrator password can be reset without authentication on the IBM V7000 Unified (CVE-2014-4811)
|
Información sobre el sistema
|
|
|
Software afectado |
IBM |
Descripción
|
The administrator superuser password can be reset to a default value without requiring prior authentication CVE(s): CVE-2014-4811 Affected product(s) and affected version(s): IBM Storwize V7000 Unified All version 1.4 fix levels starting with 1.4.3.0 and up to but not including version 1.4.3.4 are impacted. No other code releases are vulnerable. Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:
More info:
https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_administrator_password_can_be_reset_without_authentication_on_the_ibm_v7000_unified_cve_2014_4811?lang=en_us |
Identificadores estándar
|
Propiedad |
Valor |
CVE |
CVE-2014-4811 ,CVE-2014-1555 ,CVE-2014-1556 ,CVE-2014-1557 ,CVE-2007-6750 and CVE-2014-3493. |