Session fixation

IBM BladeCenter SAS Connectivity Module aka NSSM and SAS RAID Module aka RSSM before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session...