CVE Vulnerabilities

CVE-2025-1951

Execution with Unnecessary Privileges

Published: Apr 22, 2025 | Modified: Aug 12, 2025
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges.

Weakness

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Software

Name Vendor Start Version End Version
Hardware_management_console Ibm 10.2.1030.0 (including) 10.2.1030.0 (including)
Hardware_management_console Ibm 10.3.1050.0 (including) 10.3.1050.0 (including)

Potential Mitigations

References