PT-2014-6094 · Ibm · Ibm Powervc

Published 2014-08-20 · Updated 2017-08-29 · CVE-2014-4749

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVC version 1.2.0 before FixPack3

Description The issue allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key due to improper use of the known hosts file.

Recommendations For IBM PowerVC version 1.2.0 before FixPack3, apply FixPack3 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-4749

Affected Products

Ibm Powervc

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=nas8N1020224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4749 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94351 · Note