Lucene search
HistoryMay 30, 2015 - 7:59 p.m.
CVE-2015-1937
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.008
Percentile
81.2%
IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a session on port 27017.
Affected configurations
Node
ibmpowervcMatch1.2.0.0express
ORibmpowervcMatch1.2.0.0standard
ORibmpowervcMatch1.2.0.1express
ORibmpowervcMatch1.2.0.1standard
ORibmpowervcMatch1.2.0.2express
ORibmpowervcMatch1.2.0.2standard
ORibmpowervcMatch1.2.0.3express
ORibmpowervcMatch1.2.0.3standard
ORibmpowervcMatch1.2.0.4express
ORibmpowervcMatch1.2.0.4standard
ORibmpowervcMatch1.2.1.0express
ORibmpowervcMatch1.2.1.0standard
ORibmpowervcMatch1.2.1.1express
ORibmpowervcMatch1.2.1.2express
ORibmpowervcMatch1.2.1.2standard
ORibmpowervcMatch1.2.2.0express
ORibmpowervcMatch1.2.2.0standard
ORibmpowervcMatch1.2.2.1express
ORibmpowervcMatch1.2.2.1standard
ORibmpowervcMatch1.2.2.2express
ORibmpowervcMatch1.2.2.2standard
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | powervc | 1.2.0.0 | cpe:2.3:a:ibm:powervc:1.2.0.0:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.0 | cpe:2.3:a:ibm:powervc:1.2.0.0:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.1 | cpe:2.3:a:ibm:powervc:1.2.0.1:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.1 | cpe:2.3:a:ibm:powervc:1.2.0.1:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.2 | cpe:2.3:a:ibm:powervc:1.2.0.2:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.2 | cpe:2.3:a:ibm:powervc:1.2.0.2:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.3 | cpe:2.3:a:ibm:powervc:1.2.0.3:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.3 | cpe:2.3:a:ibm:powervc:1.2.0.3:*:*:*:standard:*:*:* |
| ibm | powervc | 1.2.0.4 | cpe:2.3:a:ibm:powervc:1.2.0.4:*:*:*:express:*:*:* |
| ibm | powervc | 1.2.0.4 | cpe:2.3:a:ibm:powervc:1.2.0.4:*:*:*:standard:*:*:* |
Related
cvelist
cvelist
CVE-2015-1937
2015-05-30 19:00:00
ibm
ibm
cve
cve
CVE-2015-1937
2015-05-30 19:59:02
prion
prion
Authentication flaw
2015-05-30 19:59:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.008
Percentile
81.2%
Related for NVD:CVE-2015-1937