CVE-2009-1289

CVE-2009-1289 affects the IBM BladeCenter Advanced Management Module (AMM), including BladeCenter H with BPET36H 54. The issue allows remote attackers to discover the access roles and scopes of arbitrary user accounts by sending a modified WEBINDEX parameter to private/login.ssi. Root cause: mani...