CVE-2015-0136

Publication date

2015-03-24 00:00:00

Family

ibm

State

PUBLISHED

Description

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.