PT-2014-6095 · Ibm · Ibm Powervc Express Edition

Published 2014-08-20 · Updated 2017-08-29 · CVE-2014-4750

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVC Express Edition version 1.2.0 before FixPack3

Description The issue allows remote attackers to discover credentials by sniffing the network, as it establishes an FTP session for transferring files to a managed IVM.

Recommendations For IBM PowerVC Express Edition version 1.2.0 before FixPack3, apply FixPack3 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-4750

Affected Products

Ibm Powervc Express Edition

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-4750 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1020223 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94352 · Note
• http://securityfocus.com/bid/69299 · Note