Lucene search
HistoryJul 01, 2015 - 10:59 a.m.
CVE-2015-1950
ibm
powervc
standard edition
cve-2015-1950
authentication bypass
python interpreter
kvm
nvd
6.9 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.4%
IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code.
Affected configurations
Node
ibmpowervcMatch1.2.2.1standard
ORibmpowervcMatch1.2.2.2standard
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:powervc | ibm powervc | eq | 1.2.2.1 |
| ibm:powervc | ibm powervc | eq | 1.2.2.2 |
Related
prion
prion
Authentication flaw
2015-07-01 10:59:00
cvelist
cvelist
CVE-2015-1950
2015-07-01 10:00:00
nvd
nvd
CVE-2015-1950
2015-07-01 10:59:00
6.9 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.4%
Related for CVE-2015-1950