Security Bulletin: This Power System update is being released to address CVE 2021-29891

Summary POWER9: In response to a security issue with BMC's HTTPS server, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-29891. Vulnerability Details CVEID:CVE-2021-29891 DESCRIPTION: IBM OPENBMC could allow a privileged...

CVE-2021-29891

IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network services. IBM X-Force ID: 207221...

CVE-2021-29891

Summary: IBM OPENBMC OP910 and OP940 are affected by CVE-2021-29891, where a privileged user could upload an improper site identity certificate, potentially causing loss of network services. The IBM bulletin confirms CVSS v3.0/3.1 base scores around 4.5–4.9 (MEDIUM) with network attack vector and...