Skip to content
OpenAdvisories
Medium WID-SEC-2025-0364 1 CVE

IBM Power Hardware Management Console: Schwachstelle ermöglicht Offenlegung von Informationen

Published Feb 12, 2025 · Updated Feb 12, 2025 · de-DE

Vendor: IBM Product: Power Hardware Management Console Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Power Hardware Management Console ausnutzen, um Informationen offenzulegen.

Product

Die Hardware Management Console (HMC) von IBM ist ein System zur Virtualisierung von IBM Servern.

Vulnerabilities 1

  • Medium 6.5
    CVE-2024-56477

    IBM Power Hardware Management Console directory traversal

    IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

    IBM Power Hardware Management Console

Revision history

  1. #1

    Initiale Fassung

References