CVE-2014-0875: IBM Storwize Unified v7000

Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging incorrect ACL synchronization over an unreliable NFS connection that requires retransmissions.

Affected products

• IBM Storwize Unified v7000
• IBM Storwize Unified v7000 Software: version 1.3.0.0 only; version 1.3.1.0 only; version 1.4.0.0 only; version 1.4.0.1 only; version 1.4.0.2 only; version 1.4.0.3 only; …

Published 2014-07-07. Last modified 2026-06-17.