IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
BID:73262
Info
IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 73262 |
| Class: | Unknown |
| CVE: |
CVE-2015-0137 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 12 2015 12:00AM |
| Updated: | Mar 12 2015 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM PowerVC Standard Edition 1.2.1 1 IBM PowerVC Standard Edition 1.2.1.2 IBM PowerVC Standard Edition 1.2.1.0 IBM PowerVC Standard Edition 1.2.0.3 IBM PowerVC Standard Edition 1.2.0.2 IBM PowerVC Standard Edition 1.2.0.1 IBM PowerVC Standard Edition 1.2.0.0 |
| Not Vulnerable: |
IBM PowerVC Standard Edition 1.2.2 IBM PowerVC Standard Edition 1.2.0.4 |
Discussion
IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
IBM PowerVC is prone to a security-bypass vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to gain access to sensitive information, which may lead to further attacks.
Following versions are vulnerable:
PowerVC Standard Edition 1.2.0.0 through 1.2.0.3
PowerVC Standard Edition 1.2.1.0 through 1.2.1.2
IBM PowerVC is prone to a security-bypass vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to gain access to sensitive information, which may lead to further attacks.
Following versions are vulnerable:
PowerVC Standard Edition 1.2.0.0 through 1.2.0.3
PowerVC Standard Edition 1.2.1.0 through 1.2.1.2
Exploit / POC
IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM PowerVC CVE-2015-0137 Certificate Validation Security Bypass Vulnerability
References:
References: