CVE-2021-38923

3 documents3 sources
Severity
9.1CRITICAL
EPSS
0.3%
top 49.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Powervm HypervisorIBM Powervm Hypervisor Firmware
Timeline
PublishedOct 6
Latest updateMay 24

Description

IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5ibm/powervm_hypervisorFW1010

🔴Vulnerability Details

2
GHSA
GHSA-6wrx-6f22-3628: IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs↗2022-05-24
▶
CVEList
CVE-2021-38923: IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs↗2021-10-06
▶
CVE-2021-38923 (CRITICAL CVSS 9.1) | IBM PowerVM Hypervisor FW1010 could | cvebase.io