Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72jf-24fc-r5xq

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

EPSS

Процентиль: 31%
0.00118
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
почти 11 лет назад

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

EPSS

Процентиль: 31%
0.00118
Низкий

Дефекты

CWE-200