CVE:CVE-2021-29873
CNNVD:CNNVD-202110-1494
IBM Flash System 900是美国IBM公司的一款经过全面优化的全闪存存储阵列。用于加速推动业务发展。
IBM Flash System 900 存在安全漏洞，该漏洞源于IBM Flash System 900存在外壳逃逸漏洞。攻击者可利用该漏洞获取敏感信息，并由于受限制的shell escape漏洞而导致拒绝服务。
solution:Upgrade ibm spectrum_virtualize to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm spectrum_virtualize_for_public_cloud to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm storwize_v3500_software to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm storwize_v3700_software to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm storwize_v5000_software to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm storwize_v5100_software to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm storwize_v7000_software to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm san_volume_controller_firmware to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm flashsystem_9100_firmware to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0); Upgrade ibm flashsystem_9000_firmware to a higher version than 8.4.0.0,and avoid the version [7.8.0.0,8.4.0.0)