IBM Security Bulletin: IBM PowerVC is impacted by python oslo.middleware package information disclosure (CVE-2017-2592)

IBM PowerVC may disclose some sensitive values in an error message.

CVE(s): CVE-2017-2592

Affected product(s) and affected version(s):

PowerVC Standard Edition 1.3.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2iJHQVL
X-Force Database: http://ift.tt/2elEPpE

The post IBM Security Bulletin: IBM PowerVC is impacted by python oslo.middleware package information disclosure (CVE-2017-2592) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2iKniwn