Lucene search
IbmCVE-2014-3093HistoryAug 29, 2014 - 10:00 a.m.
CVE-2014-3093
2014-08-2910:00:00
CWE-310
ibm
web.nvd.nist.gov
20
cve-2014-3093
ibm powervc
security vulnerability
cleartext passwords
sensitive information
local users
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation process, (4) environment checks, (5) powervc-ldap-config, (6) powervc-restore, and (7) powervc-diag, which allows local users to obtain sensitive information by entering a ps command or reading a file.
Affected configurations
Node
ibmpowervcMatch1.2.0.0express
ORibmpowervcMatch1.2.0.0standard
ORibmpowervcMatch1.2.0.1express
ORibmpowervcMatch1.2.0.1standard
ORibmpowervcMatch1.2.0.2express
ORibmpowervcMatch1.2.0.2standard
ORibmpowervcMatch1.2.1.0express
ORibmpowervcMatch1.2.1.0standard
ORibmpowervcMatch1.2.1.1express
ORibmpowervcMatch1.2.1.1standard
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | powervc | 1.2.0.0 | cpe:2.3:a:ibm:powervc:1.2.0.0:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.0 | cpe:2.3:a:ibm:powervc:1.2.0.0:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.1 | cpe:2.3:a:ibm:powervc:1.2.0.1:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.1 | cpe:2.3:a:ibm:powervc:1.2.0.1:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.2 | cpe:2.3:a:ibm:powervc:1.2.0.2:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.2 | cpe:2.3:a:ibm:powervc:1.2.0.2:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.1.0 | cpe:2.3:a:ibm:powervc:1.2.1.0:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.1.0 | cpe:2.3:a:ibm:powervc:1.2.1.0:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.1.1 | cpe:2.3:a:ibm:powervc:1.2.1.1:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.1.1 | cpe:2.3:a:ibm:powervc:1.2.1.1:*:*:*:standard:*:*:* |
Related
nvd
nvd
CVE-2014-3093
2014-08-29 09:55:07
prion
prion
Command injection
2014-08-29 09:55:00
cvelist
cvelist
CVE-2014-3093
2014-08-29 10:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2014-3093