CVE-2014-4750

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network...

CVE-2014-4749

IBM PowerVC 1.2.0 before FixPack3 does not properly use the knownhosts file, which allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key...

CVE-2014-4749

CVE-2014-4749 affects IBM PowerVC 1.2.0 prior to FixPack3. The vulnerability arises from improper handling of the known_hosts file, enabling man‑in‑the‑middle attackers to spoof SSH servers via an arbitrary server key. Impact is partial confidentiality breach (spoofed SSH keys) with network acces...