Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation process, (4) environment checks, (5) powervc-ldap-config, (6) powervc-restore, and (7) powervc-diag, which allows local users to obtain sensitive information by entering a ps command or reading a file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM PowerVC 加密问题漏洞
Vulnerability Description
IBM PowerVC是美国IBM公司的一套虚拟化管理解决方案。该方案支持虚拟系统管理、虚拟图像管理和部署、以及虚拟工作负载管理等。 IBM PowerVC FP3之前1.2.0版本和FP2之前1.2.1版本中存在安全漏洞，该漏洞源于在api-paste.ini文件中存在明文密码，程序在启用调试日志、安装进程、环境检查、powervc-ldap-config、powervc-restore、powervc-diag过程中使用明文密码。本地攻击者可通过进入‘ps’命令或读取文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A