CVE-2021-29765: High severity ibm powervm hypervisor vulnerability

Q: What is the severity of CVE-2021-29765?

CVE-2021-29765 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.

Q: How do I fix CVE-2021-29765?

To mitigate CVE-2021-29765, it is recommended to upgrade IBM PowerVM to the latest firmware versions that address this vulnerability.

Q: What can an attacker do with CVE-2021-29765?

An attacker with service access to the FSP could exploit CVE-2021-29765 to obtain sensitive information from the IBM PowerVM Hypervisor.

Q: Which versions of PowerVM are affected by CVE-2021-29765?

CVE-2021-29765 affects IBM PowerVM Hypervisor versions FW940 and FW950.

Q: Is CVE-2021-29765 specific to certain IBM products?

Yes, CVE-2021-29765 specifically impacts the IBM PowerVM Hypervisor for the designated firmware versions.

Published Jun 9, 2021

Updated

IBM PowerVM Hypervisor could allow an attacker to obtain sensitive information if they gain service access to the FSP.

Other sources

IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476.

Affected Software

4 affected components

IBM PowerVM=fw940

IBM PowerVM=fw950

IBM PowerVM Hypervisor<=FW940

IBM PowerVM Hypervisor<=FW950

Event History

Jun 9, 2021

CVE Published

via IBM·12:00 AM

Aug 4, 2021

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6478039

Frequently Asked Questions

What is the severity of CVE-2021-29765?

CVE-2021-29765 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.

How do I fix CVE-2021-29765?

To mitigate CVE-2021-29765, it is recommended to upgrade IBM PowerVM to the latest firmware versions that address this vulnerability.

What can an attacker do with CVE-2021-29765?