CVE-2024-55896: User Interface (UI) Misrepresentation of Critical Information

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames. This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system...

IBM PowerHA SystemMirror security vulnerabilities

IBM PowerHA SystemMirror is a high-availability cluster multiprocessor program from International Business Machines IBM. A security vulnerability exists in IBM PowerHA SystemMirror versions 7.4 and 7.5. An attacker exploiting this vulnerability could obtain cookie values by snooping on traffic...

IBM PowerHA SystemMirror security vulnerabilities

IBM PowerHA SystemMirror is a high-availability cluster multiprocessor program from International Business Machines IBM. A security vulnerability exists in IBM PowerHA SystemMirror for i versions 7.4 and 7.5 that stems from the inclusion of improper restrictions when rendering content via iFrames...

PT-2024-36607

Name of the Vulnerable Software and Affected Versions IBM PowerHA SystemMirror for i versions 7.4 through 7.5 Description The issue is related to insecure cookie handling, where the secure attribute is not set on authorization tokens or session cookies. This allows attackers to potentially obtain...

PT-2024-36606 · Ibm · Ibm Powerha Systemmirror

Name of the Vulnerable Software and Affected Versions: IBM PowerHA SystemMirror for i versions 7.4 through 7.5 Description: The issue is related to improper restrictions when rendering content via iFrames, which could allow an attacker to gain improper access and perform unauthorized actions on t...

Security Bulletin: Lodash versions prior to 4.17.21 vulnerability in PowerHA System Mirror for AIX

Summary Lodash versions prior to 4.17.21 caused vulnerability in PowerHA System Mirror for AIX releases in service. Vulnerability Details CVEID: CVE-2021-23337 DESCRIPTION: Node.js lodash module could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a...

IBM PowerHA Information Disclosure Vulnerability

IBM PowerHA is a U.S. IBM company based on fault detection, failover technology for IT equipment to provide stability energy security equipment. An information disclosure vulnerability exists in IBM PowerHA version 7.2 that allows a local attacker to exploit the vulnerability to obtain sensitive...

CVE-2020-4832

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

CVE-2020-4832

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

Design/Logic Flaw

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

CVE-2020-4832

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

CVE-2020-4832

PowerHA for IBM AIX (PowerHA System Mirror) CVE-2020-4832 is a local information-disclosure flaw in version 7.2 where a discovery failure allows reading sensitive data from temporary directories. The vulnerability is triggered locally (no user interaction) and affects confidentiality (partial to ...

PT-2021-12192

Name of the Vulnerable Software and Affected Versions IBM PowerHA version 7.2 Description The issue allows a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. Recommendations For IBM PowerHA version 7.2, consider restricting access to...

CVE-2020-4832: Undefined Security Weakness

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

Security Bulletin: PowerHA System Mirror for AIX vulnerability

Summary IBM PowerHA could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. Vulnerability Details CVEID: CVE-2020-4832 DESCRIPTION: IBM PowerHA could allow a local attacker to obtain sensitive information from temporary directories...

CVE-2020-4832

IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969...

IBM PowerHA information leakage vulnerability

IBM PowerHA is a U.S. IBM company based on fault detection, failover technology for IT equipment to provide stability energy security equipment. An information disclosure vulnerability exists in IBM PowerHA version 7.2 that allows a local attacker to exploit the vulnerability to obtain sensitive...

AIX 6.1 / 7.1.2 / 7.1.3 : IBM PowerHA SystemMirror CSPOC Privilege Escalation

The remote AIX host is running a version of IBM PowerHA SystemMirror that is missing a security patch. It is, therefore, affected by a privilege escalation vulnerability in the Cluster Single Point of Control CSPOC feature that occurs when adding an authenticated, remote user to the list that...

IBM PowerHA SystemMirror on AIX超级用户权限提升漏洞

No description provided by source...

IBM PowerHA SystemMirror on AIX Superuser Elevation of Privilege Vulnerability

IBM PowerHA SystemMirror is a cluster solution from IBM USA. The solution supports cluster migration, failover and disaster recovery. A superuser elevation of privilege vulnerability exists in IBM PowerHA SystemMirror on AIX versions 6.1 and 7.1, which allows an authenticated remote user to perfo...