IBM Flex System x222 servers IMM2 Information Disclosure Vulnerability

The IBM Flex System x222 servers are an x222 series blade server from IBM in the U.S. Integrated Management Module II IMM2 is one of the... A security vulnerability exists in the TPM of IMM2 on IBM Flex System x222 servers, which stems from a failure to properly configure it. A remote attacker...

Design/Logic Flaw

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

Design/Logic Flaw

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

CVE-2014-0881

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

CVE-2014-0882

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

CVE-2014-0881

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

CVE-2014-0881

The CVE-2014-0881 vulnerability affects IBM Flex System x222 compute node IMM2 TPM (firmware 1.00–3.56). The issue arises from an incorrectly configured TPM, potentially allowing an attacker to exfiltrate TPM data or cause a denial-of-service. IBM/IBM X-Force notes exploitability; IBM bulletin re...

CVE-2014-0882

CVE-2014-0882 affects IBM IMM2 (Integrated Management Module II) across Flex System x220/x222/x240/x440, NeXtScale nx360 M4, System x3100/M4, x3250/M4, x3500/M4, x3530/M4, x3550/M4, x3630/M4, x3650/M4, x3750/M4, and x iDataPlex dx360 M4, where certain configurations may cause generated Service Ad...

CVE-2014-0882: Exposure of Sensitive Information to an Unauthorized Actor

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

CVE-2014-0881: Improper Access Control

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

PT-2018-4126

Name of the Vulnerable Software and Affected Versions IBM Flex System x222 servers with firmware versions 1.00 through 3.56 Description The issue allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration of the Trusted Platfo...

PT-2018-4127

Name of the Vulnerable Software and Affected Versions Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems affected versions not specified Description The issue allows remote authenticated users to obtain sensitive account information vi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier...

CVE-2014-9565

Cross-site request forgery CSRF vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier...

CVE-2014-9565

Cross-site request forgery CSRF vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier...

CVE-2014-9565

IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware versions 3.4.0000 and earlier are affected by CSRF (CVE-2014-9565) due to improper validation of user-supplied input. Exploitation could occur when an authenticated user visits a malicious page, enabling the attacker to...

CVE-2014-9565: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier...

PT-2017-6365

Name of the Vulnerable Software and Affected Versions IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware versions 3.4.0000 and earlier Description A cross-site request forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into...

Crlf injection

CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting XSS attack...

CVE-2014-9564

CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting XSS attack...