PT-2014-5084

Name of the Vulnerable Software and Affected Versions IBM PowerVC versions 1.2.0 through 1.2.0 before FP3 IBM PowerVC versions 1.2.1 through 1.2.1 before FP2 Description The issue allows local users to obtain sensitive information. This is because cleartext passwords are used in various component...

CVE-2014-3093: Undefined Security Weakness

IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in 1 api-paste.ini, 2 debug logs, 3 the installation process, 4 environment checks, 5 powervc-ldap-config, 6 powervc-restore, and 7 powervc-diag, which allows local users to obtain sensitive information by entering a ps...