CVE-2015-0137
Beschrijving NL
IBM PowerVC Standard 1.2.0.x vóór 1.2.0.4 en 1.2.1.x vóór 1.2.2 valideert HMC-certificaten (Hardware Management Console) alleen tijdens de pre-login-fase, waardoor man-in-the-middle-aanvallers apparaten kunnen vervalsen via een vervaardigd certificaat.
Origineel (Engels) tonen
IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.