CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 fail to validate HMC certificates at login, enabling MITM via crafted certificates to spoof devices. Affected: IBM PowerVC PowerVC Management Console certificate validation during pre-login. Root cause: inadequate certificate va...

KLA10489 Multiple vulnerabilities in IBM PowerVC

Multiple vulnerabilities have been found in IBM PowerVC. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper certificate validation can be exploited remotely via a specially designed...