CVE-2012-6354

The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.

Score

CVSS 2.0 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2013-02-19

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• San Volume Controller Software (Ibm)
• Storwize V7000 (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004277
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80716