CVE-2023-30438

EPSS 0.24%
Veröffentlicht 17.05.2023 13:15:09
Zuletzt bearbeitet 21.11.2024 08:00:11
Erkennungen
Login

IBM PowerVM gain access

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server.  IBM X-Force ID:  252706.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Powervm Hypervisor Version >= fw950 < fw950.71

   Ibm ≫ Power System E950 Version -
   Ibm ≫ Power System E980 Version -
   Ibm ≫ Power System H922 Version -
   Ibm ≫ Power System H924 Version -
   Ibm ≫ Power System L922 Version -
   Ibm ≫ Power System S914 Version -
   Ibm ≫ Power System S922 Version -
   Ibm ≫ Power System S924 Version -

Ibm ≫ Powervm Hypervisor Version >= fw1010.00 < fw1010.51

Ibm ≫ Power System E1080 Version -

Ibm ≫ Powervm Hypervisor Version >= fw1030.00 < fw1030.11

Ibm ≫ Power System E1080 Version -

Ibm ≫ Powervm Hypervisor Version >= fw1020.00 < fw1020.31

   Ibm ≫ Power System E1050 Version -
   Ibm ≫ Power System L1022 Version -
   Ibm ≫ Power System L1024 Version -
   Ibm ≫ Power System S1014 Version -
   Ibm ≫ Power System S1022 Version -
   Ibm ≫ Power System S1022s Version -
   Ibm ≫ Power System S1024 Version -

Ibm ≫ Powervm Hypervisor Version >= fw1030.00 < fw1030.11

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.144

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2	6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
IBM	9.3	2.5	6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://exchange.xforce.ibmcloud.com/vulnerabilities/252706

Vendor Advisory

VDB Entry

https://www.ibm.com/support/pages/node/6993021

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-30438

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-30438

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-30438

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-30438