Description
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Storage Virtualize | 8.6 | — |
Advisories 1
- WID-SEC-2024-0318 IBM SAN Volume Controller, Storwize and FlashSystem: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Feb 7, 2024
References
- https://www.ibm.com/support/pages/node/7114767 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/271016 vdb-entry