Skip to content
OpenAdvisories
High WID-SEC-2025-0850 2 CVEs

IBM Power Hardware Management Console: Mehrere Schwachstellen

Published Apr 21, 2025 · Updated Apr 21, 2025 · de-DE

Vendor: IBM Product: Power Hardware Management Console Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM Power Hardware Management Console ausnutzen, um seine Privilegien zu erhöhen und beliebige Kommandos auszuführen.

Product

Die Hardware Management Console (HMC) von IBM ist ein System zur Virtualisierung von IBM Servern.

Vulnerabilities 2

  • Critical 9.3
    CVE-2025-1950

    IBM Hardware Management Console - Power Systems command execution

    IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source.

    IBM Hardware Management Console - Power Systems
  • High 8.4
    CVE-2025-1951

    IBM Hardware Management Console - Power Systems command execution

    IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges.

    IBM Hardware Management Console - Power Systems

Revision history

  1. #1

    Initiale Fassung

References