IBM PowerVC CVE-2015-0136 Local Information Disclosure Vulnerability

Bugtraq ID:	73268
Class:	Design Error
CVE:	CVE-2015-0136
Remote:	No
Local:	Yes
Published:	Mar 12 2015 12:00AM
Updated:	Mar 12 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM PowerVC Standard Edition 1.2.1 1 IBM PowerVC Standard Edition 1.2.1.2 IBM PowerVC Standard Edition 1.2.1.0 IBM PowerVC Express Edition 1.2.1 1 IBM PowerVC Express Edition 1.2.1 0 IBM PowerVC Express Edition 1.2.1.2 IBM PowerVC Express Edition 1.2.0.3 IBM PowerVC Express Edition 1.2.0.2 IBM PowerVC Express Edition 1.2.0.1 IBM PowerVC Express Edition 1.2.0.0
Not Vulnerable:	IBM PowerVC Standard Edition 1.2.2 IBM PowerVC Standard Edition 1.2.0.4

IBM PowerVC CVE-2015-0136 Local Information Disclosure Vulnerability

IBM PowerVC is prone to a local information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

IBM PowerVC CVE-2015-0136 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM PowerVC CVE-2015-0136 Local Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: IBM PowerVC Could Allow a Local Attacker to Read a Valid Acce (IBM)