CVE-2013-6737

Severity Score

4.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691 hardware fault, which allows remote authenticated users to obtain sensitive customer-data fragments by reading this file after it is copied.

IBM System Storage Storwize V7000 Unified 1.3.x y 1.4.x anterior a 1.4.3.0 no restringe debidamente el contenido de un fichero de volcado cuando encuentra un fallo de hardware 1691, lo que permite a usuarios remotos autenticados obtener información sensible de fragmentos de datos de clientes mediante la lectura este fichero después de que esté copiado.

*Credits: N/A

CVSS Scores

NISTv2 4.0

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-11-08 CVE Reserved
2014-06-21 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/68133	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89782	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.ibm.com/support/docview.wss?uid=ssg1S1004676	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.3.0.0 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.3.0.0"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.3.1.0 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.3.1.0"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.0 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.0"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.1 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.1"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.2 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.2"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.3 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.3"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.4 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.4"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.0.5 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.0.5"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.1.0 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.1.0"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.1.1 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.1.1"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.2.0 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.2.0"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected
Ibm Search vendor "Ibm"	Storwize Unified V7000 Software Search vendor "Ibm" for product "Storwize Unified V7000 Software"	1.4.2.1 Search vendor "Ibm" for product "Storwize Unified V7000 Software" and version "1.4.2.1"	-	Affected	in	Ibm Search vendor "Ibm"	Storwize Unified V7000 Search vendor "Ibm" for product "Storwize Unified V7000"	-	-	Affected