27 matches found
PT-2022-9945 · Ibm · Ibm Openbmc Op910 +1
Name of the Vulnerable Software and Affected Versions: IBM OPENBMC OP910 and OP940 affected versions not specified Description: The issue allows a privileged user to upload an improper site identity certificate, potentially causing the system to lose network services. Recommendations: At the...
CVE-2021-38960
IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047...
IBM OPENBMC Cross-Site Scripting Vulnerability
IBM OPENBMC is a POWER8 and POWER9 emulator from International Business Machines Corporation Ibm. IBM OPENBMC has a cross-site scripting vulnerability in version OP910 that stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability...
CVE-2021-38961
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
Cross site scripting
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
CVE-2021-38961
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...
Security Bulletin: This Power System update is being released to address CVE 2021-38961
Summary POWER9: In response to a security issue with the BMC's web server, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-38961. Vulnerability Details CVEID: CVE-2021-38961 DESCRIPTION: IBM OPENBMC is vulnerable to...