Vulnerability Details CVE-2015-0137
IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2015-0137
-
cpe:2.3:a:ibm:powervc:1.2.0.0
-
cpe:2.3:a:ibm:powervc:1.2.0.1
-
cpe:2.3:a:ibm:powervc:1.2.0.2
-
cpe:2.3:a:ibm:powervc:1.2.0.3
-
cpe:2.3:a:ibm:powervc:1.2.1.0
-
cpe:2.3:a:ibm:powervc:1.2.1.1