CVE-2013-6737

IBM Storwize V7000 Unified 1.3.x-1.4.x - Authenticated Sensitive Data Exposure via Dump File

Title source: llm
STIX 2.1

Description

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89782
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/68133
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=ssg1S1004676

Scores

EPSS 0.0163
EPSS Percentile 73.8%

Details

CWE
CWE-264
Status published
Products (13)
ibm/storwize_unified_v7000
ibm/storwize_unified_v7000_software 1.3.0.0
ibm/storwize_unified_v7000_software 1.3.1.0
ibm/storwize_unified_v7000_software 1.4.0.0
ibm/storwize_unified_v7000_software 1.4.0.1
ibm/storwize_unified_v7000_software 1.4.0.2
ibm/storwize_unified_v7000_software 1.4.0.3
ibm/storwize_unified_v7000_software 1.4.0.4
ibm/storwize_unified_v7000_software 1.4.0.5
ibm/storwize_unified_v7000_software 1.4.1.0
... and 3 more
Published Jun 21, 2014
Tracked Since Feb 18, 2026