CVE-2024-41781

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore.
References
Link Resource
https://www.ibm.com/support/pages/node/7172698 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
OR cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*

History

15 Aug 2025, 17:33

Type Values Removed Values Added
CPE cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e950:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922:-:*:*:*:*:*:*:*
First Time Ibm power System H922
Ibm power System H924
Ibm power System S914
Ibm
Ibm power System L922
Ibm power System E950
Ibm power System E980
Ibm power System S924
Ibm power System S922
Ibm powervm Hypervisor
References () https://www.ibm.com/support/pages/node/7172698 - () https://www.ibm.com/support/pages/node/7172698 - Vendor Advisory
Summary
  • (es) La funcionalidad de IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 a FW950.90, FW1030.00 a FW1030.60, FW1050.00 a FW1050.20 y FW1060.00 a FW1060.10) puede verse comprometida si un atacante obtiene acceso de servicio a la HMC. Un atacante que obtiene acceso de servicio a la HMC puede localizar y, a través de una serie de procedimientos de servicio, descifrar los datos contenidos en Platform KeyStore.
CWE NVD-CWE-noinfo

22 Nov 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-22 12:15

Updated : 2025-08-15 17:33


NVD link : CVE-2024-41781

Mitre link : CVE-2024-41781

CVE.ORG link : CVE-2024-41781


JSON object : View

Products Affected

ibm

  • power_system_h922
  • power_system_s914
  • power_system_e950
  • power_system_e980
  • powervm_hypervisor
  • power_system_h924
  • power_system_l922
  • power_system_s922
  • power_system_s924
CWE
CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVD-CWE-noinfo