CVE-2013-4007

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4007

The CVE-2013-4007 entry concerns a Cross-Site Scripting (XSS) vulnerability in IBM BladeCenter’s Advanced Management Module (AMM), specifically in the adv_sw.php page. Affected firmware versions are BBET before BBET64G and BPET before BPET64G. The underlying issue allows a remote attacker to exec...

Default credentials

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

CVE-2013-4038

The CVE-2013-4038 issue affects IBM IMM/IMM2 IPMI implementations (IBM BladeCenter, Flex System, System x iDataPlex, System x3###). Root cause: passwords for user accounts are stored in clear text in the IMM filesystem, enabling an attacker with access to the IMM OS to view credentials and potent...

CVE-2010-2654

Multiple cross-site scripting XSS vulnerabilities on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the 1 INDEX or 2 IPADDR parameter to...

CVE-2010-2656

The IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 logs or 2 core files via direct requests...

CVE-2010-2655

Directory traversal vulnerability in private/filemanagement.php on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other...

Improper access control

The IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 logs or 2 core files via direct requests...

Directory traversal

Directory traversal vulnerability in private/filemanagement.php on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the 1 INDEX or 2 IPADDR parameter to...

CVE-2010-2654

Multiple cross-site scripting XSS vulnerabilities on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the 1 INDEX or 2 IPADDR parameter to...

CVE-2010-2655

Directory traversal vulnerability in private/filemanagement.php on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other...

CVE-2010-2655

The vulnerability CVE-2010-2655 affects the IBM BladeCenter Advanced Management Module (AMM) firmware, BPET48L, and possibly earlier versions before 4.7 and 5.0. It is a directory traversal in private/file_management.php that allows remote authenticated users to list arbitrary directories and pot...

CVE-2010-2654

CVE-2010-2654 affects IBM BladeCenter with AMM firmware BPET48L (and possibly earlier versions before 4.7 and 5.0). The vulnerability involves multiple reflected cross-site scripting (XSS) flaws in web interfaces, enabling remote attackers to inject arbitrary script/HTML via parameters in several...

CVE-2010-2656

CVE-2010-2656 affects IBM BladeCenter AMM firmware BPET48L (and possibly earlier 4.7/5.0). The issue: sensitive data is stored under the web root with insufficient access control, enabling remote attackers to download sensitive files (e.g., logs or core files) via direct requests, demonstrated by...

CVE-2010-2656

The IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 logs or 2 core files via direct requests...

IBM Bladecenter Management - Multiple Web Application Vulnerabilities

IBM Bladecenter Management - Multiple Web Application Vulnerabilities DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group...

IBM BladeCenter Management Module Cross Site Scripting / Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-054 Application: IBM BladeCenter Managemet Module Versions Affected: BPET48L and may be other versions Vendor URL: http://www-03.ibm.com/systems/bladecenter/ Bug: XSS,Directory traversal, Information disclosure Exploits: YES Reported:...

IBM Bladecenter Management - Multiple vulnerabilities

Exploit for php platform in category web applications ===================================================== IBM Bladecenter Management - Multiple vulnerabilities ===================================================== Application: IBM BladeCenter Managemet Module Versions Affected: BPET48L and may ...

IBM Bladecenter Management - Multiple Web Application Vulnerabilities

DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group DSecRG Advisory DSECRG-09-054 Application: IBM BladeCenter Managemet...