CVE-2014-0880

CVE-2014-0880 affects IBM SAN Volume Controller and Storwize family (V3500/V3700/V5000/V7000 and Flex System V7000; Lenovo/IBM code lines 6.3–7.2). Root cause: an unauthorized network-grade user can access the system’s administrative IP and gain CLI access, enabling issuance of all administrative...

Multiple IBM Products CVE-2014-0880 Security Bypass Vulnerability

Description Multiple IBM Products are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions to perform unauthorized actions; this may aid in launching further attacks. The following products are vulnerable: IBM SAN Volume Controller 6.3, 6.4,...

Code injection

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

CVE-2013-4030

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

CVE-2013-4030

CVE-2013-4030 affects IBM IMM2 (and related IMM1/FSM) across several IBM System x and Flex System products. The vulnerability arises from SSL/TLS cipher suites using symmetric keys shorter than 128 bits, making brute-force attacks more feasible on SSL/TLS traffic. Affected IMM2 versions include 1...

IBM Flex System Manger跨站脚本漏洞

CVE ID:CVE-2013-5438 IBM Flex System Manger是一款跨计算，存储和网络资源的集成式系统管理。 IBM Flex System Manger没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 IBM Flex System Manger 1.3.0 IBM Flex System Manger 1.1.0 厂商补丁： IBM ----- IBM Flex System Manger 1.3.1已经修复该漏洞，请到厂商的主页下载： http://www.ibm.com...

CVE-2013-5438

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5438

IBM Flex System Manager (FSM) web server versions 1.1.0–1.3 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML/JavaScript via unsanitized input. The IBM bulletin notes a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) and lists aff...

CVE-2013-5438

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5424

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

Design/Logic Flaw

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

CVE-2013-5424

The IBM Security Bulletin confirms CVE-2013-5424 affects IBM Flex System Manager (FSM) 1.3.0, where an expired password for the system-level USERID lets an attacker bypass access controls and create rogue accounts or execute tasks. Affected product/version: FSM 1.3.0. Root cause: expired system-l...

CVE-2013-5424

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

CVE-2013-2808

Philips Xper vulnerability CVE-2013-2808 is a heap-based buffer overflow in Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Flex Cardio XperConnect broker environments. The issue allows remote execution of code via a cra...

Default credentials

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

CVE-2013-4038

The CVE-2013-4038 issue affects IBM IMM/IMM2 IPMI implementations (IBM BladeCenter, Flex System, System x iDataPlex, System x3###). Root cause: passwords for user accounts are stored in clear text in the IMM filesystem, enabling an attacker with access to the IMM OS to view credentials and potent...

PT-2013-5193

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out versions 2 through 5 HPE Superdome Flex RMC affected versions not specified Description The issue allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC...

ria_enumerator

This plugin searches for various Rich Internet Application files. It currently searches for: Google gears manifests These files are used to determine which files are locally cached by google gears. They do not get cleared when the browser cache is cleared and may contain sensitive information. Fl...

CVE-2012-6442

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communicatio...