CVE-2018-1464

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4,…

6.5MediumCVSS base score
1.6%Exploitation in 30 daysEPSS · top 24% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.

Timeline

2017
13 Dec 2017
13 Dec 2017
ID reserved
By ibm
2018
17 May 20185 months later
17 May 2018· 5 months later
Published
2024
16 Sept 20246 years later
16 Sept 2024· 6 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2018-1464, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS (exploitation in 30 days): 1.6% · top 24% of all CVEs (10 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Affected products

IBM · Storwize V5000
- affected 7.1
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1
IBM · Spectrum Virtualize Software
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.1
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1
IBM · Storwize V3500
- affected 6.4
- affected 7.1
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1
IBM · Storwize V7000 (2076)
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.1
- affected 7.2
- affected 7.3
- affected 7.4
- affected 1.1
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 8.1.1
IBM · Storwize V3700
- affected 7.1
- affected 6.4
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1
IBM · Spectrum Virtualize for Public Cloud
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.1
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1
IBM · SAN Volume Controller
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.1
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
IBM · FlashSystem V9000
- affected 7.5
- affected 7.6
- affected 7.6.1
- affected 7.7
- affected 7.7.1
- affected 7.8
- affected 7.8.1
- affected 8.1
- affected 6.1
- affected 6.2
- affected 6.3
- affected 6.4
- affected 7.1
- affected 7.2
- affected 7.3
- affected 7.4
- affected 8.1.1

References

ibm-storwize-cve20181464-info-disc(140395) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
http://www.ibm.com/support/docview.wss?uid=ssg1S1012282 (opens in a new tab)x_refsource_CONFIRMx_transferred
104349 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
http://www.ibm.com/support/docview.wss?uid=ssg1S1012263 (opens in a new tab)x_refsource_CONFIRMx_transferred
http://www.ibm.com/support/docview.wss?uid=ssg1S1012283 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1464](https://cveledger.app/badge/CVE-2018-1464.svg)](https://cveledger.app/cve/CVE-2018-1464)

Record last updated 16 Sept 2024, 20:17 UTC.