Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM SONAS and System Storage Storwize V7000 Unified 信息泄露漏洞
Vulnerability Description
IBM SONAS and System Storage Storwize V7000 Unified（也称V7000U）是美国IBM公司的一套Storwize系列中的专为中小企业设计的增强版虚拟化存储系统。该系统支持数据迁移、数据共享和数据备份等。 IBM SONAS and System Storage Storwize V7000 Unified 1.4.3.4之前1.3.x和1.4.x版本中存在安全漏洞，该漏洞源于程序在审计日志中存储‘chkauth’密码。本地攻击者可通过读取日志文件利用该漏洞获
CVSS Information
N/A
Vulnerability Type
N/A