CVE-2014-0875 in Storwize Unified V7000 Software
Summary
Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
01/06/2014
Disclosure
07/07/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70283 | IBM Storwize Unified V7000 Software access control | 264 | Not defined | Not defined | CVE-2014-0875 |