CVE-2021-29765 Information disclosure in PowerVM Hypervisor
An attacker with service access to the FSP can obtain sensitive information from the IBM PowerVM Hypervisor.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-29765?
CVE-2021-29765 is a medium-severity vulnerability in IBM PowerVM Hypervisor, published on 4 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476.
Which versions are affected by CVE-2021-29765?
It affects 1 product.
Products include Ibm Powervm.
How do I fix CVE-2021-29765?
No fix has been published for CVE-2021-29765 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-29765 being exploited?
There is no known exploitation of CVE-2021-29765 in the wild and no public exploit code.
Sources
Also known as GHSA-x9w5-ww6v-gxhf.