VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 15, 2014· Updated Jun 17, 2026

CVE-2014-3077

CVE-2014-3077

Description

IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • IBM/Storwize Unified V700012 versions
    cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.0.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.3.3:*:*:*:*:*:*:*
    • cpe:2.3:h:ibm:storwize_unified_v7000:-:*:*:*:*:*:*:*
    • (no CPE)range: >=1.3.0, <1.4.3.4
  • IBM/SONASllm-fuzzy
    Range: >=1.3.0, <1.4.3.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.