-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| zhmcclient | pip | < 1.18.1 | 1.18.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from functions handling sensitive properties without proper logging redaction. The commit diff shows these functions were modified to add @logged_api_call decorators with 'blanked_properties' parameters, explicitly addressing the password fields mentioned in CVE-2024-53865. Each function corresponds to one of the vulnerable scenarios described (partition/LPAR/user creation/update operations with password-like properties). The high confidence comes from direct correlation between patched functions and vulnerability descriptions in advisory materials.