IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
| Software | From | Fixed in |
|---|---|---|
| ibm / storage_virtualize | 8.4.0.0 | 8.4.0.0.x |
| ibm / storage_virtualize | 8.5.0.0 | 8.5.0.0.x |
| ibm / storage_virtualize | 8.7.0.0 | 8.7.0.0.x |
| ibm / storage_virtualize | 9.1.0.0 | 9.1.0.0.x |