description: IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
problem types: Obtain Information
affected:
{
product: SAN Volume Controller
vendor: IBM
versions:
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
}
{
product: Storwize V5000
vendor: IBM
versions:
status: affected, version: 7.1
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
{
product: Spectrum Virtualize Software
vendor: IBM
versions:
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
{
product: Storwize V7000 (2076)
vendor: IBM
versions:
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 1.1
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 8.1.1
}
{
product: Storwize V3700
vendor: IBM
versions:
status: affected, version: 7.1
status: affected, version: 6.4
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
{
product: Storwize V3500
vendor: IBM
versions:
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
{
product: FlashSystem V9000
vendor: IBM
versions:
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
{
product: Spectrum Virtualize for Public Cloud
vendor: IBM
versions:
status: affected, version: 7.5
status: affected, version: 7.6
status: affected, version: 7.6.1
status: affected, version: 7.7
status: affected, version: 7.7.1
status: affected, version: 7.8
status: affected, version: 7.8.1
status: affected, version: 8.1
status: affected, version: 6.1
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 7.1
status: affected, version: 7.2
status: affected, version: 7.3
status: affected, version: 7.4
status: affected, version: 8.1.1
}
