Authentication flaw

IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a sessio...

PT-2015-5511

Name of the Vulnerable Software and Affected Versions IBM PowerVC versions 1.2.0.x through 1.2.0.4 IBM PowerVC versions 1.2.1.x through 1.2.1.2 IBM PowerVC versions 1.2.2.x through 1.2.2.2 Description The issue allows remote attackers to read or write to arbitrary database records, and consequent...

CVE-2015-1937: Improper Access Control

IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a sessio...