CVE-2023-25683

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/247592	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7002721	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247592	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7002721	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::
	cpe:2.3:o:ibm:powervm_hypervisor::::::::

History

21 Nov 2024, 07:49

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.5~~	v2 : unknown v3 : 5.9
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 - VDB Entry, Vendor Advisory~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/247592 - VDB Entry, Vendor Advisory
References	~~() https://www.ibm.com/support/pages/node/7002721 - Vendor Advisory~~	() https://www.ibm.com/support/pages/node/7002721 - Vendor Advisory

Information

Published : 2023-06-15 01:15

Updated : 2024-11-21 07:49

NVD link : CVE-2023-25683

Mitre link : CVE-2023-25683

CVE.ORG link : CVE-2023-25683

JSON object : View

Products Affected

ibm

powervm_hypervisor

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

{"id": "CVE-2023-25683", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-06-15T01:15:10.010", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/247592", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://www.ibm.com/support/pages/node/7002721", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/247592", "tags": ["VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ibm.com/support/pages/node/7002721", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592."}], "lastModified": "2024-11-21T07:49:55.943", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0529ECFC-BFD6-4A78-B38C-B2A35DE2F7C2", "versionEndIncluding": "fw950.71", "versionStartIncluding": "fw950"}, {"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D81A9A3-2B7A-4825-B5EA-8E6E51D7E7E4", "versionEndIncluding": "fw1010.40", "versionStartIncluding": "fw1010"}, {"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E4F15E6-B47E-434C-8C82-2D00C81896FF", "versionEndIncluding": "fw1020.20", "versionStartIncluding": "fw1020"}, {"criteria": "cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "399E106D-D4D6-49A2-96B1-2FBEB8A94AC8", "versionEndIncluding": "fw1030.11", "versionStartIncluding": "fw1030"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}