CVE-2018-1775

MEDIUM

IBM Spectrum Virtualize 7.5-8.2 - Authenticated Arbitrary File Read

Title source: llm
STIX 2.1

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107187
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/148757
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10872486

Scores

CVSS v3 6.5
EPSS 0.0192
EPSS Percentile 77.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
ibm/spectrum_virtualize_software 7.5 - 8.2
ibm/spectrum_virtualize_software_for_public_cloud 7.5 - 8.2
Published Feb 27, 2019
Tracked Since Feb 18, 2026