CVE-2021-20505 Weak cryptography in PowerVM Hypervisor
Attackers with FSP access can decrypt captured PowerVM migration traffic due to a compromised encryption key exchange protocol.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20505?
CVE-2021-20505 is a medium-severity vulnerability in IBM PowerVM Hypervisor, published on 29 Jul 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to perform a series of PowerVM service procedures to decrypt the captured migration traffic IBM X-Force ID: 198232
Which versions are affected by CVE-2021-20505?
It affects 1 product.
Products include Ibm Powervm Hypervisor.
How do I fix CVE-2021-20505?
No fix has been published for CVE-2021-20505 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-20505 being exploited?
There is no known exploitation of CVE-2021-20505 in the wild and no public exploit code.
Other vulnerabilities in IBM PowerVM Hypervisor
Sources
Also known as GHSA-mhgr-vqp5-q6x4.