Privilege Escalation Vulnerability in IBM Power Hardware Management Console and Systems Director Management Console

CVE-2012-2188

Summary

A vulnerability in IBM's Power Hardware Management Console and Systems Director Management Console has been identified, where improper restrictions on the viosrvcmd command can allow local users to escalate their privileges. Specifically, this vulnerability arises from the mishandling of certain characters in command parameters, namely the dollar sign ($) and ampersand (&). Exploitation of this vulnerability enables unauthorized users to gain elevated access and execute commands with higher privileges than intended, potentially compromising the integrity of the management environment.

References