IBM PowerVM Hypervisor versions FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 contain a vulnerability in the partition resource dump interface. This vulnerability (CWE-212) allows an attacker with authenticated administrator-level access to the HMC or service processor to obtain a limited snapshot of the partition processor state, resulting in a confidentiality impact. The CVSS 3.1 base score is 3.4, reflecting low severity with attack vector requiring adjacent network access and high privileges.

The vulnerability allows disclosure of sensitive information from the partition processor state to an attacker with authenticated administrator-level access to the HMC or service processor. This results in a confidentiality impact on the managed system. There is no impact on integrity or availability.

No patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Since exploitation requires authenticated administrator-level access, ensure strict access controls to the HMC and service processor interfaces.