CVE-2014-0897

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

Information disclosure

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

CVE-2014-0897: Undefined Security Weakness

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

PT-2014-3930

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager versions 1.2.0.x through 1.3.1.x Description The issue concerns the Configuration Patterns component in IBM Flex System Manager, which uses a weak algorithm during an encryption step in Chassis Management Module account...

Code injection

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2013-5423

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

PT-2014-2923

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM versions 1.1 through 1.3 before 1.3.2.0 Description The issue allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions 1.1 through 1.3 before 1.3.2.0, update to versio...

CVE-2013-5423: Exposure of Sensitive Information to an Unauthorized Actor

IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...

IBM Flex System Manger跨站脚本漏洞

CVE ID:CVE-2013-5438 IBM Flex System Manger是一款跨计算，存储和网络资源的集成式系统管理。 IBM Flex System Manger没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 IBM Flex System Manger 1.3.0 IBM Flex System Manger 1.1.0 厂商补丁： IBM ----- IBM Flex System Manger 1.3.1已经修复该漏洞，请到厂商的主页下载： http://www.ibm.com...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5438

IBM Flex System Manager (FSM) web server versions 1.1.0–1.3 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML/JavaScript via unsanitized input. The IBM bulletin notes a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) and lists aff...

PT-2013-5541

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager versions 1.1.0 through 1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the web server...

CVE-2013-5438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server in IBM Flex System Manager FSM 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

CVE-2013-5424: Undefined Security Weakness

IBM Flex System Manager FSM 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account...

PT-2013-5535

Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM version 1.3.0 Description The issue allows remote attackers to bypass intended access restrictions. This can lead to the creation of new user accounts or the execution of tasks by leveraging an expired password for...

CVE-2012-4838

IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 allow local users to obtain sensitive information about 1 local accounts, 2 SSH private keys, 3 SSL/TLS private keys, 4 SNMPv3 communities, and 5 LDAP credentials by leveraging unspecified side effects of servic...

Code injection

IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 allow local users to obtain sensitive information about 1 local accounts, 2 SSH private keys, 3 SSL/TLS private keys, 4 SNMPv3 communities, and 5 LDAP credentials by leveraging unspecified side effects of servic...

PT-2012-5602

Name of the Vulnerable Software and Affected Versions IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 affected versions not specified Description The issue allows local users to obtain sensitive information, including local accounts, SSH private keys, SSL/TLS...

CVE-2012-4838: Undefined Security Weakness

IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 allow local users to obtain sensitive information about 1 local accounts, 2 SSH private keys, 3 SSL/TLS private keys, 4 SNMPv3 communities, and 5 LDAP credentials by leveraging unspecified side effects of servic...