Lucene search

[email protected]NVD:CVE-2015-1950

HistoryJul 01, 2015 - 10:59 a.m.

CVE-2015-1950

2015-07-0110:59:00

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

44.4%

JSON

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code.

Affected configurations

Nvd

Node

ibmpowervcMatch1.2.2.1standard

ibmpowervcMatch1.2.2.2standard

VendorProductVersionCPE
ibmpowervc1.2.2.1cpe:2.3:a:ibm:powervc:1.2.2.1:*:*:*:standard:*:*:*
ibmpowervc1.2.2.2cpe:2.3:a:ibm:powervc:1.2.2.2:*:*:*:standard:*:*:*

Vendor	Product	Version	CPE
ibm	powervc	1.2.2.1	cpe:2.3:a:ibm:powervc:1.2.2.1::::standard:::
ibm	powervc	1.2.2.2	cpe:2.3:a:ibm:powervc:1.2.2.2::::standard:::

References

www-01.ibm.com/support/docview.wss?uid=nas8N1020740

www-01.ibm.com/support/docview.wss?uid=swg1IT08926

www.securityfocus.com/bid/75102

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

44.4%

JSON

Related for NVD:CVE-2015-1950

cve1 cvelist1 prion1