IBM Security Bulletin: Administrator password can be reset without authentication on SAN Volume Controller and Storwize Family (CVE-2014-4811)

The administrator superuser password can be reset to a default value without requiring prior authentication CVE(s): CVE-2014-4811 Affected product(s) and affected version(s): IBM SAN Volume Controller IBM Storwize V7000 IBM...



from IBM Product Security Incident Response Team http://ibm.co/1BsUxn0