IBM Security Bulletin: IBM PowerVC is affected by vulnerability in OpenStack Nova (CVE-2017-7214)

OpenStack Nova could allow an attacker to obtain sensitive information from logs.

CVE(s): CVE-2017-7214

Affected product(s) and affected version(s):

IBM PowerVC Standard Edition 1.3.0 through 1.3.0.2
IBM PowerVC Standard Edition 1.3.1 through 1.3.1.2
IBM PowerVC Standard Edition 1.3.2 through 1.3.2.1
IBM Cloud PowerVC Manager 1.3.1 through 1.3.0.2
IBM Cloud PowerVC Manager 1.3.2 through 1.3.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2r4q2a3
X-Force Database: http://ift.tt/2qz8nnH

The post IBM Security Bulletin: IBM PowerVC is affected by vulnerability in OpenStack Nova (CVE-2017-7214) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2r4ihAZ