PT-2015-4496 · Ibm · Ibm Powervc Standard

Publicado 2015-03-24 · Atualizado 2015-03-24 · CVE-2015-0137

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVC Standard versions 1.2.0.x through 1.2.0.3 IBM PowerVC Standard versions 1.2.1.x through 1.2.1.x

Description The issue allows man-in-the-middle attackers to spoof devices via a crafted certificate, as the validation of Hardware Management Console (HMC) certificates only occurs during the pre-login stage.

Recommendations For IBM PowerVC Standard versions 1.2.0.x through 1.2.0.3, update to version 1.2.0.4 or later. For IBM PowerVC Standard versions 1.2.1.x through 1.2.1.x, update to version 1.2.2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-0137

Produtos afetados

Ibm Powervc Standard

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-0137 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1020611 · Aviso do Fabricante