CVEvulnerability

CVE-2024-41781

5.9 MEDIUM Published 2024-11-22 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-497

Description

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore.

Affected configurations

• ibm powervm hypervisor (>= fw950.00 <= fw950.b0) • ibm powervm hypervisor (>= fw1030.00 <= fw1030.60) • ibm powervm hypervisor (>= fw1050.00 <= fw1050.20) • ibm powervm hypervisor (>= fw1060.00 <= fw1060.10)

Related

Weakness · CWE (1)

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness

References