CVE-2014-4750

2014-08-2010:00:00

ibm

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

69.2%

JSON

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

References

www-01.ibm.com/support/docview.wss?uid=nas8N1020223

www.securityfocus.com/bid/69299

exchange.xforce.ibmcloud.com/vulnerabilities/94352