IBM Hardware Management Console Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	26769
Class:	Access Validation Error
CVE:	CVE-2007-6294 CVE-2007-6305 CVE-2007-6293
Remote:	Yes
Local:	Yes
Published:	Dec 07 2007 12:00AM
Updated:	Dec 19 2007 02:31PM
Credit:	The vendor disclosed this issue.
Vulnerable:	IBM Hardware Management Console (HMC) 6.1.3 IBM Hardware Management Console (HMC) 3.3.7 IBM Hardware Management Console (HMC) 7.3.2.0
Not Vulnerable:

IBM Hardware Management Console Unspecified Privilege Escalation Vulnerability

IBM Hardware Management Console is prone to an unspecified privilege-escalation vulnerability.

Currently, very little is known about this issue. We will update this BID as more information emerges.

This issue affects Hardware Management Console Version 3 Release 3.7; other versions may also be affected.

IBM Hardware Management Console Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Hardware Management Console Unspecified Privilege Escalation Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.

IBM Hardware Management Console Unspecified Privilege Escalation Vulnerability

References:

• IBM Hardware Management Console HomePage (IBM)
  
• Security fix for HMC Version 3 Release 3.7 (IBM)
  
• Security fix for HMC Version 6 Release 1.3 (IBM)
  
• Security fix for HMC Version 7 Release 3.2.0 (IBM)