← back
CVE-2018-1466

CVE-2018-1466

EPSS 0.8%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 May 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Affected products
IBM · FlashSystem V9000IBM · SAN Volume ControllerIBM · Spectrum Virtualize for Public CloudIBM · Spectrum Virtualize SoftwareIBM · Storwize V3500IBM · Storwize V3700IBM · Storwize V5000IBM · Storwize V7000 (2076)
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/140397http://www.ibm.com/support/docview.wss?uid=ssg1S1012263http://www.ibm.com/support/docview.wss?uid=ssg1S1012282http://www.ibm.com/support/docview.wss?uid=ssg1S1012283http://www.securityfocus.com/bid/104349