IBM Security Bulletin: Multiple vulnerabilities in IPv6 and MQ affect IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products

Jul 31, 2018 9:01 am EDT

Categorized: High Severity

Share this post:

Vulnerabilities in the IPv6 and MQ components affect IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products. Applicable CVEs are CVE-2016-10142 and CVE-2017-11176.

CVE(s): CVE-2016-10142, CVE-2017-11176

Affected product(s) and affected version(s):

IBM SAN Volume Controller
IBM Storwize V7000
IBM Storwize V5000
IBM Storwize V3700
IBM Storwize V3500
IBM FlashSystem V9000

All products are affected when running supported version 7.5.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10717931
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/124080
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/129055

from IBM Product Security Incident Response Team https://ift.tt/2ACqzHl