Description
Multiple vulnerabilities have been found in IBM PowerVC. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information.
Below is a complete list of vulnerabilities
- Improper certificate validation can be exploited remotely via a specially designed certificate;
- Lack of access token incapsulation can be exploited locally via manipulations with process list.
Original advisories
Related products
CVE list
- CVE-2015-0136 warning
- CVE-2015-0137 warning
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!