CVE-2015-1937

CVE-2015-1937 describes an authentication bypass vulnerability in IBM PowerVC versions 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2. This flaw allows unauthenticated remote attackers to read or write to the Ceilometer NoSQL database on port 27017, potentially leading to administrator privilege escalation. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling full confidentiality, integrity, and availability impact. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.