Command injection

IBM Power Hardware Management Console HMC 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console SDMC 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via...

CVE-2012-2188

Vulnerability CVE-2012-2188 affects IBM Power Hardware Management Console (HMC) and Systems Director Management Console (SDMC). The root cause is improper restriction of the VIOS viosrvcmd command, enabling local users to gain privileges via vectors involving a $ or & character. Affected versions...

PT-2012-3868

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console HMC versions 7R3.5.0 through 7R3.5.0 before SP4 IBM Power Hardware Management Console HMC versions 7R7.1.0 through 7R7.2.0 before 7R7.2.0 SP3 IBM Power Hardware Management Console HMC versions 7R7.3.0...

CVE-2012-2188: Undefined Security Weakness

IBM Power Hardware Management Console HMC 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console SDMC 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via...