IBM Security Bulletin: A vulnerability affects the IBM FlashSystem 840 and 900

Apr 30, 2019 9:00 am EDT

Categorized: Medium Severity

Share this post:

There is a vulnerability to which the FlashSystem™ 840 and 900 are susceptible. An exploit of this vulnerability could make the system subject to an attack which could allow an authenticated user to download arbitrary files from the operating system.

CVE(s): CVE-2018-1775

Affected product(s) and affected version(s):
FlashSystem 900 MTMs affected include 9840-AE2 and 9843-AE2. FlashSystem 840 MTMs affected include 9840-AE1 and 9843-AE1. Supported code versions which are affected:

• VRMFs prior to 1.4.8.2
• VRMFs prior to 1.5.2.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10881207
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148757

from IBM Product Security Incident Response Team https://ibm.co/2PLxMZz