Vulnerability Bulletins |
IBM Security Bulletin: IBM Virtualization Engine TS7700 – Insufficient Restrictions on SSH Users (CVE-2014-3048) |
|
| Affected software | IBM |
|
Unprivileged users may be able to invoke privileged commands via SSH. With the right type of network access to the hardware, a skilled user could figure out a way to craft an SSH command to grant themselves privileged access, allowing the user to issue all administrative commands, with the potential to disrupt normal system operation. This patch fixes a security vulnerability that allows a TSSC service user unauthorized access to the attached TS7700. CVE(s): CVE-2014-3048 Affected product(s) More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_virtualization_engine_ts7700_ndash_insufficient_restrictions_on_ssh_users_cve_2014_3048?lang=en_us |
|