CVE-2016-0230

Опубликовано: 07 июл. 2016

Источник: nvd

CVSS3: 6.8

CVSS2: 7.2

EPSS Низкий

Описание

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027
Vendor Advisory
http://www.securityfocus.com/bid/91535
Third Party Advisory
VDB Entry
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html
Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*

Конфигурация 7

cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.0008

Низкий

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-pxf8-85w5-w34j

CVSS3: 6.8

github

больше 3 лет назад

EPSS

Процентиль: 24%

0.0008

Низкий

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264