Multiple vulnerabilities in IBM PowerVC

Description

Multiple vulnerabilities have been found in IBM PowerVC. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Improper certificate validation can be exploited remotely via a specially designed certificate;
2. Lack of access token incapsulation can be exploited locally via manipulations with process list.

Original advisories

Related products

• IBM-PowerVC

CVE list

• CVE-2015-0136
  warning
• CVE-2015-0137
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com