PT-2015-4495 · Ibm · Ibm Powervc
Published
2015-03-24
·
Updated
2015-03-24
·
CVE-2015-0136
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM PowerVC versions 1.2.0.x through 1.2.0.3
IBM PowerVC versions 1.2.1.x through 1.2.1.x before 1.2.2
Description
The issue allows local users to obtain sensitive information by listing the process, as an access token is placed on the command line during IVM and PowerKVM management.
Recommendations
For IBM PowerVC versions 1.2.0.x through 1.2.0.3, update to version 1.2.0.4 or later.
For IBM PowerVC versions 1.2.1.x through 1.2.1.x before 1.2.2, update to version 1.2.2 or later.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Powervc