Powervc@1.2.1.1 Security Vulnerabilities and Issues — Powervc@1.2.1.1 CVE List

Lucene search

IbmPowervc1.2.1.1

3 matches found

CVE•added 2015/03/24 12:59 a.m.•36 views

CVE-2015-0136

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

2.1CVSS5.9AI score0.00118EPSS

CVE•added 2015/05/30 7:59 p.m.•34 views

CVE-2015-1937

IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a session ...

7.5CVSS7AI score0.00769EPSS

CVE•added 2015/03/24 12:59 a.m.•32 views

CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.

4.3CVSS6.4AI score0.0017EPSS