Vulnerability Bulletins

IBM Security Bulletin: IBM PowerVC is Impacted by OpenStack Cinder and Nova Information Disclosure (CVE-2014-7230, CVE-2014-7231)


System information

   
Affected software IBM

Description

PowerVC is impacted by vulnerabilities in OpenStack cinder and nova that could allow a local attacker to obtain sensitive information. CVE(s): CVE-2014-7230 and CVE-2014-7231 Affected product(s) and affected version(s): PowerVC Express Edition 1.2.0.0 through 1.2.0.3 PowerVC Express Edition 1.2.1.0 through 1.2.1.2 PowerVC Standard Edition 1.2.0.0 through 1.2.0.3 PowerVC Standard Edition 1.2.1.0 through 1.2.1.2 Refer to the following reference URLs for remediation and additional

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_powervc_is_impacted_by_openstack_cinder_and_nova_information_disclosure_cve_2014_7230_cve_2014_7231?lang=en_us

Standar resources

Property Value
CVE CVE-2014-7230 ,CVE-2014-7231 ,CVE-2015-0159 ,CVE-2015-1910 ,CVE-2013-7423 ,CVE-2014-7817 ,CVE-2014-9402 ,CVE-2015-1472 and CVE-2014-6192.

Version history

Version Comments Date
1.0 Advisory issued 2015-04-19
Ministerio de Defensa
CNI
CCN
CCN-CERT