CVE-2023-38280

CVSS 8.4v3.1pub. 2023-10-16upd. 2024-11-21

IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 260740.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Hardware Management Console
APP
Ibm
10.1.1010.010.2.1030.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-269

References

exchange.xforce.ibmcloud.com/vulnerabilities/260740…

www.ibm.com/support/pages/node/7047713…

exchange.xforce.ibmcloud.com/vulnerabilities/260740…

www.ibm.com/support/pages/node/7047713…

Related vulnerabilities

CVE-2025-1950CRITICAL9.3PL ✓ten sam produkt

IBM Hardware Management Console — wykonanie poleceń przez niezaufane biblioteki

CVE-2025-1951HIGH8.4ten sam produkt

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to exec...

CVE-2021-29707HIGH7.8ten sam produkt

IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their pri...

CVE-2009-1806HIGH9.3ten sam produkt

Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sha...

CVE-2009-0178HIGH10.0ten sam produkt

Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and ...