Hmc V11 1 1110 0
Monthly
OS command injection in the IBM Hardware Management Console (HMC) lets a remote, unauthenticated attacker run arbitrary commands with elevated privileges on the management appliance. It affects HMC V10.3.1050.0 through 10.3.1064.0 and V11.1.1110.0 through 11.1.1112.0, the systems used to manage IBM Power servers (including Novalink deployments), stemming from improper validation of user-supplied input (CWE-78). No public exploit has been identified at time of analysis, but the network-reachable, no-authentication vector and 9.8 CVSS make this a top-priority patch.
OS command injection in the IBM Hardware Management Console (HMC) lets a remote, unauthenticated attacker run arbitrary commands with elevated privileges on the management appliance. It affects HMC V10.3.1050.0 through 10.3.1064.0 and V11.1.1110.0 through 11.1.1112.0, the systems used to manage IBM Power servers (including Novalink deployments), stemming from improper validation of user-supplied input (CWE-78). No public exploit has been identified at time of analysis, but the network-reachable, no-authentication vector and 9.8 CVSS make this a top-priority patch.