Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
- ibm / aix7.2 – 7.2
- ibm / aix7.2.0 – 7.2.0
- ibm / aix7.3 – 7.3
- ibm / aix7.3.0 – 7.3.0
- ibm / aix7.2.5 – 7.2.5.212
- ibm / powervm_vios4.1.0 – 4.1.0
- ibm / powervm_vios4.1 – 4.1
- ibm / vios4.1.0 – 4.1.0.50
References
Updated 10m ago · 8 sources