{"id":"CVE-2018-1775","aliases":["EUVD-2018-12354","GHSA-7657-r953-54qx"],"status":"published","title":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products...","description":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:T","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.01924,"percentile":0.80059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2019-02-27T22:00:00Z","modified":"2026-06-17T01:51:45Z","products":[{"vendor":"ibm","product":"flashsystem 9100 family"},{"vendor":"ibm","product":"flashsystem v9000"},{"vendor":"ibm","product":"san volume controller"},{"vendor":"ibm","product":"spectrum virtualize for public cloud"},{"vendor":"ibm","product":"spectrum virtualize software"},{"vendor":"ibm","product":"spectrum_virtualize_software"},{"vendor":"ibm","product":"spectrum_virtualize_software_for_public_cloud"},{"vendor":"ibm","product":"torwize v3500"},{"vendor":"ibm","product":"torwize v3700"},{"vendor":"ibm","product":"torwize v5000"},{"vendor":"ibm","product":"torwize v7000"}],"references":[{"url":"http://www.securityfocus.com/bid/107187","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/148757","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10872486","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1775"},{"url":"https://github.com/advisories/GHSA-7657-r953-54qx"}],"sources":{"cve":[{"id":"CVE-2018-1775","description":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.","status":"published","published":"2019-02-27T22:00:00Z","modified":"2024-09-16T18:43:43.401Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:T","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-12354","description":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.","status":"published","published":"2019-02-27T22:00:00Z","modified":"2024-09-16T18:43:43Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:T","level":"medium"}],"updated_at":"2026-11-03T00:55:30.209098Z"}],"ghsa":[{"id":"GHSA-7657-r953-54qx","title":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products...","description":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.","status":"published","published":"2022-05-13T01:32:43Z","modified":"2023-02-01T05:08:31Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:47.326034Z"}],"nvd":[{"id":"CVE-2018-1775","description":"IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.","status":"published","published":"2019-02-27T22:29:00.38Z","modified":"2026-06-17T01:51:45.117Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:54.21788Z"}]}}