Lucene search

IbmCVELIST:CVE-2023-30438

HistoryMay 17, 2023 - 12:48 p.m.

CVE-2023-30438 IBM PowerVM gain access

2023-05-1712:48:37

ibm

www.cve.org

ibm powervm

power9

power10

privileged user access

isolation violation

data leakage

arbitrary code execution

physical server

x-force id 252706

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

Percentile

5.1%

JSON

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerVM Hypervisor",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "FW950.70",
        "status": "affected",
        "version": "FW950.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1010.50",
        "status": "affected",
        "version": "FW1010.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1020.30",
        "status": "affected",
        "version": "FW1020.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "FW1030.10",
        "status": "affected",
        "version": "FW1030.00",
        "versionType": "semver"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/252706

www.ibm.com/support/pages/node/6993021

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-30438