| Title | 複数の IBM 製品における暗号強度に関する脆弱性 |
|---|---|
| Summary | 複数の IBM 製品には、暗号強度に関する脆弱性が存在します。 ベンダは、本脆弱性を IBM X-Force ID: 140397 として公開しています。 |
| Possible impacts | 情報を取得される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | May 11, 2018, midnight |
| Registration Date | July 4, 2018, 12:21 p.m. |
| Last Update | July 4, 2018, 12:21 p.m. |
| CVSS3.0 : 警告 | |
| Score | 5.3 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVSS2.0 : 注意 | |
| Score | 3.5 |
|---|---|
| Vector | AV:N/AC:M/Au:S/C:P/I:N/A:N |
| IBM |
| IBM Storwize V7000 ソフトウェア |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2018年07月04日] 掲載 |
July 4, 2018, 12:21 p.m. |
| Summary | IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397. |
|---|---|
| Publication Date | May 18, 2018, 6:29 a.m. |
| Registration Date | March 1, 2021, 6:57 p.m. |
| Last Update | Nov. 21, 2024, 12:59 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:storwize_v7000_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:storwize_v5000_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:storwize_v3700_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:storwize_v3700:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:storwize_v3500_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:storwize_v9000_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:storwize_v9000:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:ibm:san_volume_controller:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* | 8.1.2.0 | 8.1.2.1 | |||
| cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* | 8.1.1.0 | 8.1.1.2 | |||
| cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* | 7.8.0.0 | 7.8.1.6 | |||
| cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* | 7.7.0.0 | 7.7.1.9 | |||
| cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* | 6.1.0.0 | 7.5.0.14 | |||