PT-2016-4101 · Ibm · Ibm Hardware Management Console

Publicado 2016-07-07 · Atualizado 2020-12-09 · CVE-2016-0230

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console (HMC) versions 7.3 through 7.3.0 SP7 IBM Power Hardware Management Console (HMC) versions 7.9 through 7.9.0 SP3 IBM Power Hardware Management Console (HMC) versions 8.1 through 8.1.0 SP3 IBM Power Hardware Management Console (HMC) versions 8.2 through 8.2.0 SP2 IBM Power Hardware Management Console (HMC) versions 8.3 through 8.3.0 SP2 IBM Power Hardware Management Console (HMC) versions 8.4 through 8.4.0 SP1 IBM Power Hardware Management Console (HMC) version 8.5.0

Description The issue allows physically proximate attackers to obtain root access via unspecified vectors.

Recommendations For versions 7.3 through 7.3.0 SP7, update to a version later than 7.3.0 SP7. For versions 7.9 through 7.9.0 SP3, update to a version later than 7.9.0 SP3. For versions 8.1 through 8.1.0 SP3, update to a version later than 8.1.0 SP3. For versions 8.2 through 8.2.0 SP2, update to a version later than 8.2.0 SP2. For versions 8.3 through 8.3.0 SP2, update to a version later than 8.3.0 SP2. For versions 8.4 through 8.4.0 SP1, update to a version later than 8.4.0 SP1. For version 8.5.0, update to a version later than 8.5.0.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-0230

Produtos afetados

Ibm Hardware Management Console

Referências · 16

• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021 · Aviso do Fabricante
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026 · Aviso do Fabricante
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html · Aviso do Fabricante
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-0230 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0230 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024 · Aviso do Fabricante
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html · Aviso do Fabricante