PT-2021-22323 · Ibm · Ibm Powervm Hypervisor

Published 2021-10-06 · Updated 2021-10-14 · CVE-2021-38923

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1010

Description The issue allows a privileged user to gain access to another virtual machine (VM) due to the assignment of duplicate World Wide Port Names (WWPNs).

Recommendations For IBM PowerVM Hypervisor version FW1010, ensure unique WWPNs are assigned to each VM to prevent unauthorized access.

Fix

Related Identifiers

CVE-2021-38923

Affected Products

Ibm Powervm Hypervisor

References · 5

• https://osv.dev/vulnerability/CVE-2021-38923 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38923 · Security Note
• https://ibm.com/support/pages/node/6495879 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/210162 · Vendor Advisory
• https://t.me/cibsecurity/30086 · Telegram Post