ZeroHour

CVE-2018-1434

CVSS 3.1
8.8 high
EPSS
<1%p58
Published
()
Modified
Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139474.

Vendors
ibm
Products
storwize v7000 firmware, storwize v5000 firmware, storwize v3700 firmware, storwize v3500 firmware, storwize v9000 firmware, san volume controller firmware, spectrum virtualize, spectrum virtualize for public cloud
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.