Skip to content
8.8 High

CVE-2021-29873 IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service…

Description

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.

Affected products and versions

Product Affected versions Fixed in
FlashSystem 900 1.6.1.4 No fix stated
FlashSystem 900 1.5.2.10 No fix stated
FlashSystem V9000 8.4 No fix stated
FlashSystem V9000 7.8 No fix stated
Storwize V3500 8.4 No fix stated
Storwize V3500 7.8 No fix stated
Storwize V5000 8.4 No fix stated
Storwize V5000 7.8 No fix stated
Storwize V5100 8.4 No fix stated
Show the 13 other branches
Product Affected versions Fixed in
Storwize V5100 7.8 No fix stated
FlashSystem 9100 Family 8.4 No fix stated
FlashSystem 9100 Family 7.8 No fix stated
Storwize V3700 8.4 No fix stated
Storwize V3700 7.8 No fix stated
SAN Volume Controller 8.4 No fix stated
SAN Volume Controller 7.8 No fix stated
Storwize V7000 8.4 No fix stated
Storwize V7000 7.8 No fix stated
Spectrum Virtualize Software 8.4 No fix stated
Spectrum Virtualize Software 7.8 No fix stated
Spectrum Virtualize for Public Cloud 8.4 No fix stated
Spectrum Virtualize for Public Cloud 7.8 No fix stated
The 3 CVEs of FlashSystem 900 →
Track this CVE