low2.9
CVE-2014-4750
IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover…
Impact
IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Powervc | Versions 1.2.0.0, 1.2.0.1, 1.2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1020223
- http://www.securityfocus.com/bid/69299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94352
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1020223
- http://www.securityfocus.com/bid/69299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94352