WID-SEC-W-2023-2711

DeutschShown in its original language — a full translation is planned for a future version.

IBM SAN Volume Controller: Schwachstelle ermöglicht Offenlegung von Informationen

view advisory published 2015-03-23

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM SAN Volume Controller, IBM Storwize V7000, IBM Storwize V5000, IBM Storwize V3700 und IBM Storwize V3500 ausnutzen, um Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2014-7809US	medium6.8	3.38% (89th)	—	2014-12-10
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to bypass the CSRF protection mechanism.

references

External citations — patches, advisories, analysis.

IBM Support Document #S1005037 vom 2015-03-23external
WID-SEC-W-2023-2711 - CSAF Versionself
WID-SEC-2023-2711 - Portal Versionself
IBM Security Bulletin 690189 vom 2023-10-19external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan