CVE-2015-0136

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-24 · updated 2026-06-17
Weakness: CWE-200

Description

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

Affected products

IBM Powervc: 1.2.0.0, 1.2.0.1, 1.2.0.2, 1.2.0.3, 1.2.1.0, 1.2.1.1

References

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020608
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020608

Get alerted when CVE-2015-0136 or the next vulnerability affects your stack