The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
| Software | From | Fixed in |
|---|---|---|
| ibm / san_volume_controller_software | 6.4.0.0 | 6.4.0.0.x |
| ibm / san_volume_controller_software | 6.2.0.0 | 6.2.0.0.x |
| ibm / san_volume_controller_software | 6.1.0.0 | 6.1.0.0.x |
| ibm / san_volume_controller_software | 6.3.0.0 | 6.3.0.0.x |