IBM Security Bulletin: This Power System update is being released to address CVE-2018-12384

Mar 19, 2019 10:00 am EDT

Categorized: Medium Severity

Share this post:

POWER9: In response to a data leak vulnerability in the network security services, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-12384. This man-in-the-middle attack could provide false completion or errant network transactions or exposure of sensitive data from intercepted SSL connections to ASMI, Redfish, or the service processor message server.

CVE(s): CVE-2018-12384

Affected product(s) and affected version(s):
Firmware release FW920 is affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10873162
X-Force Database: CVE-2018-12384

from IBM Product Security Incident Response Team https://ift.tt/2Jmfo9P