Riskcovery

CVE-2021-29873

State
Published
Severity
8.8 High
Published
Oct 21, 2021
Updated
Sep 16, 2024
Reserved
Mar 31, 2021

Read the record on cve.org

Description

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.

Scores

CVSSScoreVectorSource
3.08.8 HighCVSS:3.0/A:H/AV:N/I:H/PR:L/C:H/S:U/UI:N/AC:L/E:U/RC:C/RL:Oibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
FlashSystem 900IBM
  • 1.6.1.4Affected
  • 1.5.2.10Affected
FlashSystem V9000IBM
  • 7.8Affected
  • 8.4Affected
Storwize V3500IBM
  • 7.8Affected
  • 8.4Affected
Storwize V5000IBM
  • 7.8Affected
  • 8.4Affected
Storwize V5100IBM
  • 8.4Affected
  • 7.8Affected
FlashSystem 9100 FamilyIBM
  • 8.4Affected
  • 7.8Affected
Storwize V3700IBM
  • 7.8Affected
  • 8.4Affected
SAN Volume ControllerIBM
  • 7.8Affected
  • 8.4Affected
Storwize V7000IBM
  • 8.4Affected
  • 7.8Affected
Spectrum Virtualize SoftwareIBM
  • 7.8Affected
  • 8.4Affected
Spectrum Virtualize for Public CloudIBM
  • 7.8Affected
  • 8.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.