Not rated
CVE-2018-1466 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4,…
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SAN Volume Controller | 8.1 | No fix stated |
| SAN Volume Controller 7.8 | 7.8 → 7.8.1 | No fix stated |
| SAN Volume Controller 7.7 | 7.7 → 7.7.1 | No fix stated |
| SAN Volume Controller 7.6 | 7.6 → 7.6.1 | No fix stated |
| SAN Volume Controller | 7.5 | No fix stated |
| SAN Volume Controller | 7.1 | No fix stated |
| SAN Volume Controller | 6.4 | No fix stated |
| SAN Volume Controller | 6.3 | No fix stated |
| SAN Volume Controller | 6.2 | No fix stated |
Show the 93 other branches Hide the 93 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SAN Volume Controller | 6.1 | No fix stated |
| Storwize V5000 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V5000 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V5000 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V5000 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V5000 | 7.5 | No fix stated |
| Storwize V5000 | 7.4 | No fix stated |
| Storwize V5000 | 7.3 | No fix stated |
| Storwize V5000 | 7.2 | No fix stated |
| Storwize V5000 | 7.1 | No fix stated |
| Storwize V5000 | 6.4 | No fix stated |
| Storwize V5000 | 6.3 | No fix stated |
| Storwize V5000 | 6.2 | No fix stated |
| Storwize V5000 | 6.1 | No fix stated |
| Spectrum Virtualize Software 8.1 | 8.1 → 8.1.1 | No fix stated |
| Spectrum Virtualize Software 7.8 | 7.8 → 7.8.1 | No fix stated |
| Spectrum Virtualize Software 7.7 | 7.7 → 7.7.1 | No fix stated |
| Spectrum Virtualize Software 7.6 | 7.6 → 7.6.1 | No fix stated |
| Spectrum Virtualize Software | 7.5 | No fix stated |
| Spectrum Virtualize Software | 7.4 | No fix stated |
| Spectrum Virtualize Software | 7.3 | No fix stated |
| Spectrum Virtualize Software | 7.2 | No fix stated |
| Spectrum Virtualize Software | 7.1 | No fix stated |
| Spectrum Virtualize Software | 6.4 | No fix stated |
| Spectrum Virtualize Software | 6.3 | No fix stated |
| Spectrum Virtualize Software | 6.2 | No fix stated |
| Spectrum Virtualize Software | 6.1 | No fix stated |
| Storwize V7000 (2076) 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V7000 (2076) 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V7000 (2076) 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V7000 (2076) 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V7000 (2076) | 7.5 | No fix stated |
| Storwize V7000 (2076) | 7.4 | No fix stated |
| Storwize V7000 (2076) | 7.3 | No fix stated |
| Storwize V7000 (2076) | 7.2 | No fix stated |
| Storwize V7000 (2076) | 7.1 | No fix stated |
| Storwize V7000 (2076) | 6.4 | No fix stated |
| Storwize V7000 (2076) | 6.3 | No fix stated |
| Storwize V7000 (2076) | 6.2 | No fix stated |
| Storwize V7000 (2076) | 6.1 | No fix stated |
| Storwize V7000 (2076) | 1.1 | No fix stated |
| Storwize V3700 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V3700 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V3700 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V3700 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V3700 | 7.5 | No fix stated |
| Storwize V3700 | 7.4 | No fix stated |
| Storwize V3700 | 7.3 | No fix stated |
| Storwize V3700 | 7.2 | No fix stated |
| Storwize V3700 | 7.1 | No fix stated |
| Storwize V3700 | 6.4 | No fix stated |
| Storwize V3700 | 6.3 | No fix stated |
| Storwize V3700 | 6.2 | No fix stated |
| Storwize V3700 | 6.1 | No fix stated |
| Storwize V3500 8.1 | 8.1 → 8.1.1 | No fix stated |
| Storwize V3500 7.8 | 7.8 → 7.8.1 | No fix stated |
| Storwize V3500 7.7 | 7.7 → 7.7.1 | No fix stated |
| Storwize V3500 7.6 | 7.6 → 7.6.1 | No fix stated |
| Storwize V3500 | 7.5 | No fix stated |
| Storwize V3500 | 7.4 | No fix stated |
| Storwize V3500 | 7.3 | No fix stated |
| Storwize V3500 | 7.2 | No fix stated |
| Storwize V3500 | 7.1 | No fix stated |
| Storwize V3500 | 6.4 | No fix stated |
| Storwize V3500 | 6.3 | No fix stated |
| Storwize V3500 | 6.2 | No fix stated |
| Storwize V3500 | 6.1 | No fix stated |
| FlashSystem V9000 8.1 | 8.1 → 8.1.1 | No fix stated |
| FlashSystem V9000 7.8 | 7.8 → 7.8.1 | No fix stated |
| FlashSystem V9000 7.7 | 7.7 → 7.7.1 | No fix stated |
| FlashSystem V9000 7.6 | 7.6 → 7.6.1 | No fix stated |
| FlashSystem V9000 | 7.5 | No fix stated |
| FlashSystem V9000 | 7.4 | No fix stated |
| FlashSystem V9000 | 7.3 | No fix stated |
| FlashSystem V9000 | 7.2 | No fix stated |
| FlashSystem V9000 | 7.1 | No fix stated |
| FlashSystem V9000 | 6.4 | No fix stated |
| FlashSystem V9000 | 6.3 | No fix stated |
| FlashSystem V9000 | 6.2 | No fix stated |
| FlashSystem V9000 | 6.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 8.1 | 8.1 → 8.1.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.8 | 7.8 → 7.8.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.7 | 7.7 → 7.7.1 | No fix stated |
| Spectrum Virtualize for Public Cloud 7.6 | 7.6 → 7.6.1 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.5 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.4 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.3 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.2 | No fix stated |
| Spectrum Virtualize for Public Cloud | 7.1 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.4 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.3 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.2 | No fix stated |
| Spectrum Virtualize for Public Cloud | 6.1 | No fix stated |
Other CVEs of SAN Volume Controller
The 9 CVEs of SAN Volume Controller →
CVE-2021-29873
IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service…
8.8
High
CVE-2018-1775
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2…
6.5
Medium
CVE-2018-1461
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1,…
Not rated
CVE-2018-1462
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1,…
Not rated