CVE-2014-6147

CVE-2014-6147 affects IBM Flex System Manager (FSM) versions 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.x, 1.3.1.x, and 1.3.2.0. An authenticated user can obtain sensitive data and use it to escalate privileges or impersonate other users via unspecified vectors. IBM’s advisory notes remediation via code up...

CVE-2014-6147: Exposure of Sensitive Information to an Unauthorized Actor

IBM Flex System Manager FSM 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors...

PT-2015-3823

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM versions 1.1.x.x through 1.3.2.0 Description The issue allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors. Recommendations...

CVE-2014-0897

The CVE-2014-0897 entry concerns IBM Flex System Manager (FSM) and its Configuration Patterns component. The issue is that FSM versions 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x use a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation. This weak cryptographi...

CVE-2014-0897

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

CVE-2014-0897

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

Information disclosure

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

CVE-2014-0897: Undefined Security Weakness

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

PT-2014-3930

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager versions 1.2.0.x through 1.3.1.x Description The issue concerns the Configuration Patterns component in IBM Flex System Manager, which uses a weak algorithm during an encryption step in Chassis Management Module account...

CVE-2013-5423

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

Code injection

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2013-5423

Summary: CVE-2013-5423 affects IBM Flex System Manager (FSM) and IBM Systems Director in related advisories. The vulnerability allows an unauthenticated or unauthorized attacker to enumerate the list of user accounts in FSM/ISD, which could facilitate brute-force or unauthorized access attempts. ...

CVE-2013-5423

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

PT-2014-2923

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM versions 1.1 through 1.3 before 1.3.2.0 Description The issue allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions 1.1 through 1.3 before 1.3.2.0, update to versio...

CVE-2013-5423: Exposure of Sensitive Information to an Unauthorized Actor

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

[Blackhash] Audit Passwords Without Hashes

A traditional password audit typically involves extracting password hashes from systems and then sending those hashes to a third-party security auditor or an in-house security team. These security specialists have the knowledge and tools to effectively audit password hashes. They use password...

IBM Flex System Manger跨站脚本漏洞

CVE ID:CVE-2013-5438 IBM Flex System Manger是一款跨计算，存储和网络资源的集成式系统管理。 IBM Flex System Manger没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 IBM Flex System Manger 1.3.0 IBM Flex System Manger 1.1.0 厂商补丁： IBM ----- IBM Flex System Manger 1.3.1已经修复该漏洞，请到厂商的主页下载： http://www.ibm.com...

CVE-2013-5438

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5438

IBM Flex System Manager (FSM) web server versions 1.1.0–1.3 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML/JavaScript via unsanitized input. The IBM bulletin notes a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) and lists aff...