Description
IBM PowerVC 1.2.0 before FixPack3 does not properly use the known_hosts file, which allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key.
Unscored
CVE-2014-4749
EUVD-2014-4668GHSA-mm2r-6wc2-rpgx
IBM PowerVC 1.2.0 before FixPack3 does not properly use the known_hosts file, which allows man-in-the-middle attackers to spoof SSH servers…
Published Aug 20, 2014 · Updated Aug 6, 2024 · Assigned by ibm