CVE-2014-3081

2014-08-1723:55:06

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON

prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.

Affected configurations

Nvd

Node

ibmglobal_console_manager_16_firmwareRange≤1.20.0.22575

ibmglobal_console_manager_32_firmwareRange≤1.20.0.22575

VendorProductVersionCPE
ibmglobal_console_manager_16_firmware*cpe:2.3:o:ibm:global_console_manager_16_firmware:*:*:*:*:*:*:*:*
ibmglobal_console_manager_32_firmware*cpe:2.3:o:ibm:global_console_manager_32_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	global_console_manager_16_firmware	*	cpe:2.3:o:ibm:global_console_manager_16_firmware::::::::
ibm	global_console_manager_32_firmware	*	cpe:2.3:o:ibm:global_console_manager_32_firmware::::::::