PT-2014-6095 · Ibm · Ibm Powervc Express Edition

Publicado 2014-08-20 · Atualizado 2017-08-29 · CVE-2014-4750

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVC Express Edition version 1.2.0 before FixPack3

Description The issue allows remote attackers to discover credentials by sniffing the network, as it establishes an FTP session for transferring files to a managed IVM.

Recommendations For IBM PowerVC Express Edition version 1.2.0 before FixPack3, apply FixPack3 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-4750

Produtos afetados

Ibm Powervc Express Edition

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/94352 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4750 · Nota de Segurança
• http://securityfocus.com/bid/69299 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1020223 · Aviso do Fabricante