PT-2023-20242 · Ibm · Ibm Powervm Hypervisor

Published 2023-06-15 · Updated 2023-06-21 · CVE-2023-25683

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW950.00 through FW950.71 IBM PowerVM Hypervisor versions FW1010.00 through FW1010.40 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.20 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.11

Description The issue allows an attacker to obtain sensitive information if they gain service access to the HMC.

Recommendations For versions FW950.00 through FW950.71, update to a version outside of this range to resolve the issue. For versions FW1010.00 through FW1010.40, update to a version outside of this range to resolve the issue. For versions FW1020.00 through FW1020.20, update to a version outside of this range to resolve the issue. For versions FW1030.00 through FW1030.11, update to a version outside of this range to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-25683

Affected Products

Ibm Powervm Hypervisor

References · 7

• https://osv.dev/vulnerability/CVE-2023-25683 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 · Vendor Advisory
• https://ibm.com/support/pages/node/7002721 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25683 · Security Note
• https://t.me/cibsecurity/65255 · Telegram Post
• https://t.me/cvenotify/52366 · Telegram Post
• https://t.me/cvenotify/52755 · Telegram Post