Lucene search

IbmCVELIST:CVE-2023-25683

HistoryJun 15, 2023 - 12:59 a.m.

CVE-2023-25683 IBM PowerVM Hypervisor information disclosure

2023-06-1500:59:47

CWE-200

ibm

www.cve.org

ibm

powervm

hypervisor

information disclosure

cve-2023-25683

fw950

fw1010

fw1020

fw1030

x-force id

247592

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

41.4%

JSON

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerVM Hypervisor",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "FW950.71",
        "status": "affected",
        "version": "FW950.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1010.40",
        "status": "affected",
        "version": "FW1010.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1020.20",
        "status": "affected",
        "version": "FW1020.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1030.11",
        "status": "affected",
        "version": "FW1030.00",
        "versionType": "semver"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/247592

www.ibm.com/support/pages/node/7002721

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

41.4%

JSON

Related for CVELIST:CVE-2023-25683