CVE-2015-1950

Published: Jul 1, 2015Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code.

Affected (2)

Products: Ibm: Powervc

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Powervc	Version 1.2.2.1
Ibm Powervc	Version 1.2.2.2

Related CWEs

References (6)

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020740

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IT08926

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/75102

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020740

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IT08926

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/75102

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.