IBM BladeCenter Management Module Cross Site Scripting / Directory Traversal

`  
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-054  
  
  
Application: IBM BladeCenter Managemet Module  
Versions Affected: BPET48L and may be other versions  
Vendor URL: http://www-03.ibm.com/systems/bladecenter/  
Bug: XSS,Directory traversal, Information disclosure  
Exploits: YES  
Reported: 05.09.2009  
Vendor response: 09.09.2009  
Solution: YES  
Date of Public Advisory: 05.07.2010  
Author: Sintsov Alexey   
from Digital Security Research Group [DSecRG] (research [at] dsecrg [dot] com)  
  
  
Description  
***********  
  
The BladeCenter management module is prone to multiple security vulnerabilities:  
  
  
Details  
*******  
http://dsecrg.com/pages/vul/show.php?id=154  
  
Solution  
********  
  
All three issues were fixed in the v4.7 and v5.0  
  
References  
*********  
http://dsecrg.com/pages/vul/show.php?id=154  
  
  
About  
*****  
  
Digital Security is one of the leading IT security companies in CEMEA,  
providing information security consulting, audit and penetration  
testing services, ERP and SAP security assessment, certification for ISO/IEC 27001:2005 and PCI DSS and PA DSS standards.  
Digital Security Research Group focuses on enterprise application (ERP) and database  
security problems with vulnerability reports, advisories and whitepapers  
posted regularly on our website.  
  
Contact: research [at] dsecrg [dot] com  
http://www.dsecrg.com   
  
  
  
  
Polyakov Alexandr. PCI QSA,PA-QSA  
Head of security audit department  
Head of Digital Security Research Group  
______________________  
DIGITAL SECURITY  
phone: +7 812 703 1547  
+7 812 430 9130  
e-mail: [email protected]   
www.dsec.ru  
www.dsecrg.com  
www.pcidss.ru  
  
  
-----------------------------------  
This message and any attachment are confidential and may be privileged or otherwise protected   
from disclosure. If you are not the intended recipient any use, distribution, copying or disclosure   
is strictly prohibited. If you have received this message in error, please notify the sender immediately   
either by telephone or by e-mail and delete this message and any attachment from your system. Correspondence   
via e-mail is for information purposes only. Digital Security neither makes nor accepts legally binding   
statements by e-mail unless otherwise agreed.   
-----------------------------------   
`