Improper input validation in IBM Powervc

CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Powervc — versions 1.2.0.0, 1.2.0.1, 1.2.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References