IBM PowerVM Hypervisor Vulnerability Allows System Administrator to Obtain Sensitive Partition Information
CVE-2023-46183

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Powervm Hypervisor
Vendor
CVE Published:
6 February 2024

Summary

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could allow a system administrator to obtain sensitive partition information. IBM X-Force ID: 269695.

Affected Version(s)

PowerVM Hypervisor FW950.00

PowerVM Hypervisor FW1020.00

PowerVM Hypervisor FW1030.00

References

https://www.ibm.com/support/pages/node/7114982
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/269695
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.