Security Bulletin: Multiple vulnerabilities in OpenSSH, GNU C Library (glibc), and OpenSSL, including Logjam, affect Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by Integrated Management Module II IMM2. Vulnerability Details Summary OpenSSL...

Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-8710)

Summary Vulnerability in libxml2 affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems CVE-2015-8710 Vulnerability Details Summary Vulnerability in libxml2 affects IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems CVE-2015-87...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by multiple vulnerabilities in libssh2

Summary The following vulnerabilities in libssh2 have been addressed by IBM Integrated Management Module II IMM2. Vulnerability Details CVEID: CVE-2019-3857 DESCRIPTION: libssh2 could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow. By sending a...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by a vulnerability with the IPv6 networking support (CVE-2015-2922)

Summary The following vulnerability in IPv6 has been addressed by IBM Integrated Management Module II IMM2. Vulnerability Details CVEID: CVE-2015-2922 DESCRIPTION: Linux Kernel, built with the IPv6 networking supportCONFIGIPV6, is vulnerable to a denial of service, caused by the improper handling...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by a libcurl security vulnerability (CVE-2019-5482)

Summary IBM Integrated Management Module II IMM2 is affected by a libcurl security vulnerability CVE-2019-5482 Vulnerability Details CVEID: CVE-2019-5482 DESCRIPTION: cURL libcurl is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the tftpreceivepacket function. ...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSH (CVE-2018-15919)

Summary The following vulnerability in OpenSSH has been addressed by IBM Integrated Management Module II IMM2. Vulnerability Details CVEID: CVE-2018-15919 DESCRIPTION: Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of user...

Security Bulletin: Multiple vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed in August 2014. This bulletin also addresses curl vulnerabilities disclosed in July 2014, and OpenSSH vulnerabilities that were disclosed in April 2014. Vulnerability Details Summary OpenSSL vulnerabilities were disclosed in August 2014. This bulleti...

CVE-2014-0881: Improper Access Control

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

PT-2018-4126

Name of the Vulnerable Software and Affected Versions IBM Flex System x222 servers with firmware versions 1.00 through 3.56 Description The issue allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration of the Trusted Platfo...

PT-2018-4127

Name of the Vulnerable Software and Affected Versions Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems affected versions not specified Description The issue allows remote authenticated users to obtain sensitive account information vi...

CVE-2014-0882: Exposure of Sensitive Information to an Unauthorized Actor

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

PT-2014-3898

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.66E IBM Integrated Management Module IMM versions prior to 1.43 IBM Integrated Management Module II IMM2 versions prior to 4.15 Description The issue allows attackers to execut...

CVE-2013-4031: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...

PT-2013-4806

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM and Integrated Management Module II IMM2 affected versions not specified Description The issue concerns the RAKP protocol support in the Intelligent Platform Management Interface IPMI implementation, which send...