CVE-2014-0875

N/A

Descricao

Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/7/2014

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

ibm:storwize_unified_v7000ibm:storwize_unified_v7000_software

Fraquezas (CWE)

CWE-264

Referencias

http://www.ibm.com/support/docview.wss?uid=ssg1S1004738(psirt@us.ibm.com)

http://www.securityfocus.com/bid/68398(psirt@us.ibm.com)

http://www.ibm.com/support/docview.wss?uid=ssg1S1004738(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/68398(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.