CVE-2018-1462
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to including deleting files or causing a denial of service. IBM X-Force ID: 140363.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Authenticated users can access, delete, or cause DoS via improper file access in IBM storage products versions 6.1-8.1.1.
Vulnerability
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize, and IBM FlashSystem products (versions 6.1 through 8.1.1) contain a vulnerability that allows an authenticated user to access system files they should not have access to, including deleting files or causing a denial of service [1]. The issue is present in the product's management interface.
Exploitation
An attacker must have authenticated access to the affected product's management interface. With valid credentials, the attacker can send specially crafted requests to access, modify, or delete system files, potentially leading to a denial of service [1].
Impact
Successful exploitation allows the attacker to read, modify, or delete arbitrary system files, compromising the confidentiality and integrity of the system, and potentially causing a denial of service [1]. No privilege escalation is required beyond the authenticated user role.
Mitigation
IBM has not released a specific fix for CVE-2018-1462 as of the publication date. Users should apply the latest firmware updates from IBM and refer to the security bulletins for general mitigations [1].
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
11- Range: 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, 8.1.1
6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, 8.1.1+ 1 more
- (no CPE)range: 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, 8.1.1
- (no CPE)range: 6.1
- Range: 7.5
- IBM/Spectrum Virtualize for Public Cloudv5Range: 7.5
- IBM/Spectrum Virtualize Softwarev5Range: 7.5
- Range: 6.4
- Range: 7.1
- Range: 7.1
- Range: 6.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.ibm.com/support/docview.wssmitrex_refsource_CONFIRM
- www.ibm.com/support/docview.wssmitrex_refsource_CONFIRM
- www.ibm.com/support/docview.wssmitrex_refsource_CONFIRM
- www.securityfocus.com/bid/104349mitrevdb-entryx_refsource_BID
- exchange.xforce.ibmcloud.com/vulnerabilities/140363mitrevdb-entryx_refsource_XF
News mentions
0No linked articles in our index yet.