PT-2014-6094 · Ibm · Ibm Powervc

Publicado 2014-08-20 · Atualizado 2017-08-29 · CVE-2014-4749

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVC version 1.2.0 before FixPack3

Description The issue allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key due to improper use of the known hosts file.

Recommendations For IBM PowerVC version 1.2.0 before FixPack3, apply FixPack3 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4749

Produtos afetados

Ibm Powervc

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=nas8N1020224 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94351 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4749 · Nota de Segurança