Remote authenticated users can modify virtual-system deployment in IBM SmartCloud Provisioning 2.1 before FP3 IF0001

CVE-2013-5455 · MEDIUM Severity

AV:N/AC:M/AU:S/C:N/I:P/A:P

IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command.

Learn more about our Cloud Audit.