Power System Exposure of Sensitive System Information
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-497 | CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere |
Type: CWE
Description: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 6.0 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N |
Version: 3.1
Base score: 6.0
Base severity: MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N