Lucene search

IbmVULNRICHMENT:CVE-2023-33851

HistoryFeb 04, 2024 - 12:16 a.m.

CVE-2023-33851 IBM PowerVM Hypervisor information disclosure

2024-02-0400:16:46

CWE-200

ibm

github.com

ibm

powervm

hypervisor

information disclosure

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partition data to a system administrator. IBM X-Force ID: 257135.

CNA Affected

[
  {
    "vendor": "IBM",
    "product": "PowerVM Hypervisor",
    "versions": [
      {
        "status": "affected",
        "version": "FW950.00",
        "versionType": "semver",
        "lessThanOrEqual": "FW950.90"
      },
      {
        "status": "affected",
        "version": "FW1020.00",
        "versionType": "semver",
        "lessThanOrEqual": "FW1020.40"
      },
      {
        "status": "affected",
        "version": "FW1030.00",
        "versionType": "semver",
        "lessThanOrEqual": "FW1030.30"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/257135

www.ibm.com/support/pages/node/7114491

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-33851