CVE-2009-1290

Опубликовано: 13 апр. 2009

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*

EPSS

Процентиль: 64%

0.00462

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-j8cp-q9f7-wqch

github

почти 4 года назад