CVE-2014-0875

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-07 · updated 2026-06-17
Weakness: CWE-264

Description

Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.

Affected products

IBM Storwize Unified V7000: all versions
IBM Storwize V7000 Unified (2073): 1.3.0.0, 1.3.1.0, 1.4.0.0, 1.4.0.1, 1.4.0.2, 1.4.0.3 (+9)

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1004738
http://www.securityfocus.com/bid/68398
http://www.ibm.com/support/docview.wss?uid=ssg1S1004738
http://www.securityfocus.com/bid/68398

Get alerted when CVE-2014-0875 or the next vulnerability affects your stack