IBM Security Bulletin: Vulnerability in OpenSSH affects IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products (CVE-2016-10708)

Jul 20, 2018 9:01 am EDT

Categorized: Medium Severity

Share this post:

A vulnerability in the OpenSSH component affects the Command Line Interface of IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products.

CVE(s): CVE-2016-10708

Affected product(s) and affected version(s):

IBM SAN Volume Controller
IBM Storwize V7000
IBM Storwize V5000
IBM Storwize V3700
IBM Storwize V3500
IBM FlashSystem V9000

All products are affected when running supported version 7.5.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10717661
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117448

from IBM Product Security Incident Response Team https://ift.tt/2LBoU5A