133 matches found
Security Bulletin: Vulnerabilities in the GNU C Libraries (glibc) affect IBM Flex System Manager(FSM) (CVE-2013-2207, CVE-2014-8121, CVE-2015-1781)
Summary Multiple security vulnerabilities have been discovered in the GNU C Library glibc that is embedded in the IBM FSM. These vulnerabilities are addressed in this bulletin. Vulnerability Details CVEID: CVE-2013-2207 DESCRIPTION: The GNU C Library glibc could allow a local attacker to bypass...
Security Bulletin: A security vulnerability with openssh affects IBM Flex System Manager (CVE-2015-5600)
Summary A security vulnerability has been identified in openssh that is contained in the IBM Flex System Manager FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2015-5600 DESCRIPTION: OpenSSH could allow a local attacker to obtain sensitive information, caused by ...
Security Bulletin: A security vulnerability with ntpd affects IBM Flex System Manager (CVE-2015-1799)
Summary A security vulnerability has been identified in ntpd that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2015-1799 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd is vulnerable to a denial of service,...
Security Bulletin: A security vulnerability with net-snmp affects IBM Flex System Manager (CVE-2015-5621)
Summary A security vulnerability has been identified in net-snmp that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2015-5621 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by incompletely parsed varBind...
Solarwinds FSM RCE Vulnerability
Solarwinds Firewall Security Manager is prone to a remote code execution RCE vulnerability SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
Session fixation
userlogin.jsp in SolarWinds Firewall Security Manager FSM before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling...
CVE-2015-2284
CVE-2015-2284 affects SolarWinds Firewall Security Manager (FSM) prior to version 6.6.5 HotFix1, with a vulnerability in userlogin.jsp that enables an unauthenticated remote attacker to gain privileges and execute arbitrary code via a client session handling flaw. The linked sources indicate mult...
CVE-2014-6147
CVE-2014-6147 affects IBM Flex System Manager (FSM) versions 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.x, 1.3.1.x, and 1.3.2.0. An authenticated user can obtain sensitive data and use it to escalate privileges or impersonate other users via unspecified vectors. IBM’s advisory notes remediation via code up...
CVE-2013-5423
Summary: CVE-2013-5423 affects IBM Flex System Manager (FSM) and IBM Systems Director in related advisories. The vulnerability allows an unauthenticated or unauthorized attacker to enumerate the list of user accounts in FSM/ISD, which could facilitate brute-force or unauthorized access attempts. ...
CVE-2013-5438
IBM Flex System Manager (FSM) web server versions 1.1.0–1.3 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML/JavaScript via unsanitized input. The IBM bulletin notes a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) and lists aff...
CVE-2013-5424
The IBM Security Bulletin confirms CVE-2013-5424 affects IBM Flex System Manager (FSM) 1.3.0, where an expired password for the system-level USERID lets an attacker bypass access controls and create rogue accounts or execute tasks. Affected product/version: FSM 1.3.0. Root cause: expired system-l...
