CyberSec.Space Logo
Back to CVE Browser

CVE-2021-38960

HIGH
7.5
CVSS Severity Score
EPSS Score0.1290%
EPSS Percentile27.50th
PublishedFeb 4, 2022
Last ModifiedNov 21, 2024

Vulnerability Description

IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.

Affected Platforms (CPE)

💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op920
💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op930
💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op940
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op920
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op930
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op940
💻
Ibm

Power Hardware Management Console \(7063 Cr2\) Firmware

= op940

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
🔗 https://www.ibm.com/support/pages/node/6529322
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
🔗 https://www.ibm.com/support/pages/node/6529322

Related Vulnerabilities

CVE-2021-2124310.0

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deser...

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-2124410.0

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server sid...