Vulnerability · Published May 17, 2023 · Assigned by ibm
CVE-2023-30438IBM PowerVM gain access
Critical 9.3
In plain English
A critical-severity security flaw in PowerVM Hypervisor from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)9.3Critical
Exploit odds (30 days)0.2%top 85.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | PowerVM Hypervisor | FW950.00 – through FW950.70FW1010.00 – through FW1010.50FW1020.00 – through FW1020.30FW1030.00 – through FW1030.10 |