CVE-2014-3077

IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file.

Score

CVSS 2.0 2.1 Low

Status

Modified - psirt@us.ibm.com

Published

2014-09-15

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Storwize Unified V7000 (Ibm)
• Storwize V7000 Unified Software (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004837
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93906