Directory traversal

2010-07-0812:54:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.343 Low

EPSS

Percentile

97.1%

JSON

Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a … (dot dot) in the DIR parameter.

CPENameOperatorVersion
advanced_management_modulele2.48
advanced_management_moduleeq1.00
advanced_management_moduleeq1.01
advanced_management_moduleeq1.20 f
advanced_management_moduleeq1.20
advanced_management_moduleeq1.25 i
advanced_management_moduleeq1.25 e
advanced_management_moduleeq1.25
advanced_management_moduleeq1.26 k
advanced_management_moduleeq1.26 h

Name	Operator	Version
advanced_management_module	le	2.48
advanced_management_module	eq	1.00
advanced_management_module	eq	1.01
advanced_management_module	eq	1.20 f
advanced_management_module	eq	1.20
advanced_management_module	eq	1.25 i
advanced_management_module	eq	1.25 e
advanced_management_module	eq	1.25
advanced_management_module	eq	1.26 k
advanced_management_module	eq	1.26 h

Rows per page:

1-10 of 371

References

dsecrg.com/pages/vul/show.php?id=154

osvdb.org/66124

www.securityfocus.com/bid/41383

www.exploit-db.com/exploits/14237/