CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-38960

HIGH
7.5
CVSS Severity Score
EPSS Score0.1290%
EPSS Percentile27.50th
Published2022年2月4日
Last Modified2024年11月21日

Vulnerability Description

IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.

Affected Platforms (CPE)

💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op920
💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op930
💻
Ibm

Power System Ac922 \(8335 Gtx\) Firmware

= op940
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op920
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op930
💻
Ibm

Power System Ac922 \(8335 Gth\) Firmware

= op940
💻
Ibm

Power Hardware Management Console \(7063 Cr2\) Firmware

= op940

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
🔗 https://www.ibm.com/support/pages/node/6529322
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
🔗 https://www.ibm.com/support/pages/node/6529322

相关漏洞威胁

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-2732910.0

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

CVE-2021-4155610.0

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to ...

CVE-2021-138810.0

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could a...