CVE-2023-38280: High severity ibm hmc vulnerability

Q: What is the severity of CVE-2023-38280?

The severity of CVE-2023-38280 is high with a CVSS score of 8.4.

Q: How can a local user escalate their privileges to root access using CVE-2023-38280?

A local user can escalate their privileges to root access on a restricted shell by exploiting CVE-2023-38280.

Q: Which versions of IBM HMC are affected by CVE-2023-38280?

IBM HMC versions 10.1.1010.0 and 10.2.1030.0 are affected by CVE-2023-38280.

Q: How can I fix the vulnerability CVE-2023-38280?

To fix the vulnerability CVE-2023-38280, it is recommended to update IBM HMC to a version that is not affected.

Q: Where can I find more information about CVE-2023-38280?

You can find more information about CVE-2023-38280 on the IBM X-Force ID: 260740 and the IBM Support website.

Published Oct 6, 2023

Updated

IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 260740.

Other sources

IBM HMC (Hardware Management Console) could allow a local user to escalate their privileges to root access on a restricted shell.

Affected Software

4 affected components

IBM HMC V10.1.1010.0<=V10.1.1010.0

IBM HMC V10.2.1030.0<=V10.2.1030.0

IBM Hardware Management Console=10.1.1010.0

IBM Hardware Management Console=10.2.1030.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7047713

Event History

Oct 6, 2023

CVE Published

12:00 AM

Parent advisories

This vulnerability appears in the following advisories.

IBM-7047713

Frequently Asked Questions

What is the severity of CVE-2023-38280?

The severity of CVE-2023-38280 is high with a CVSS score of 8.4.

How can a local user escalate their privileges to root access using CVE-2023-38280?