PT-2016-4101 · Ibm · Ibm Hardware Management Console

Published 2016-07-07 · Updated 2020-12-09 · CVE-2016-0230

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console (HMC) versions 7.3 through 7.3.0 SP7 IBM Power Hardware Management Console (HMC) versions 7.9 through 7.9.0 SP3 IBM Power Hardware Management Console (HMC) versions 8.1 through 8.1.0 SP3 IBM Power Hardware Management Console (HMC) versions 8.2 through 8.2.0 SP2 IBM Power Hardware Management Console (HMC) versions 8.3 through 8.3.0 SP2 IBM Power Hardware Management Console (HMC) versions 8.4 through 8.4.0 SP1 IBM Power Hardware Management Console (HMC) version 8.5.0

Description The issue allows physically proximate attackers to obtain root access via unspecified vectors.

Recommendations For versions 7.3 through 7.3.0 SP7, update to a version later than 7.3.0 SP7. For versions 7.9 through 7.9.0 SP3, update to a version later than 7.9.0 SP3. For versions 8.1 through 8.1.0 SP3, update to a version later than 8.1.0 SP3. For versions 8.2 through 8.2.0 SP2, update to a version later than 8.2.0 SP2. For versions 8.3 through 8.3.0 SP2, update to a version later than 8.3.0 SP2. For versions 8.4 through 8.4.0 SP1, update to a version later than 8.4.0 SP1. For version 8.5.0, update to a version later than 8.5.0.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-0230

Affected Products

Ibm Hardware Management Console

References · 16

• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021 · Vendor Advisory
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026 · Vendor Advisory
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html · Vendor Advisory
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0230 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0230 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024 · Vendor Advisory
• https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html · Vendor Advisory