Description
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10887369
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/162159
Broken Link vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/108808
Scores
CVSS v3
5.5
EPSS
0.0035
EPSS Percentile
27.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-255
Status
published
Products (2)
ibm/i
7.2
ibm/i
7.3
Published
Jun 14, 2019
Tracked Since
Feb 18, 2026