title: IBM PowerVM Hypervisor information disclosure
description: IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC.  IBM X-Force ID:  247592.
problem types: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
defaultStatus: unaffected
product: PowerVM Hypervisor
vendor: IBM
versions:
lessThanOrEqual: FW950.71, status: affected, version: FW950.00, versionType: semver
lessThanOrEqual: FW1010.40, status: affected, version: FW1010.00, versionType: semver
lessThanOrEqual: FW1020.20, status: affected, version: FW1020.00, versionType: semver
lessThanOrEqual: FW1030.11, status: affected, version: FW1030.00, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL