Skip to content
OpenAdvisories
High WID-SEC-2024-0566 4 CVEs

IBM Power Hardware Management Console: Mehrere Schwachstellen

Published Mar 6, 2024 · Updated Mar 6, 2024 · de-DE

Vendor: IBM Product: Power Hardware Management Console Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Power Hardware Management Console ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.

Product

Die Hardware Management Console (HMC) von IBM ist ein System zur Virtualisierung von IBM Servern.

Vulnerabilities 4

  • Medium 6.5
    CVE-2023-46169

    IBM DS8900F file manipulation

    IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file. IBM X-Force ID: 269406.

    IBM DS8900F
  • Medium 6.5
    CVE-2023-46170

    IBM DS8900F information disclosure

    IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

    IBM DS8900F
  • Medium 5.6
    CVE-2023-46172

    IBM DS8900F security bypass

    IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow a remote attacker to bypass authentication restrictions for authorized user. IBM X-Force ID: 269409.

    IBM DS8900F
  • Medium 4.3
    CVE-2023-46171

    IBM DS8900F information disclosure

    IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to view sensitive log information after enumerating filenames. IBM X-Force ID: 269408.

    IBM DS8900F

Revision history

  1. #1

    Initiale Fassung

References