CVE-2010-2655

Опубликовано: 08 июл. 2010

Источник: nvd

CVSS2: 4

EPSS Средний

Описание

Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.

Ссылки

http://dsecrg.com/pages/vul/show.php?id=154
Exploit
http://osvdb.org/66124
http://www.exploit-db.com/exploits/14237/
Exploit
http://www.securityfocus.com/bid/41383
Exploit
http://dsecrg.com/pages/vul/show.php?id=154
Exploit
http://osvdb.org/66124
http://www.exploit-db.com/exploits/14237/
Exploit
http://www.securityfocus.com/bid/41383
Exploit

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:h:ibm:advanced_management_module:*:l:*:*:*:*:*:*

Версия до 2.48 (включая)

cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:h:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.28:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.32:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.34:b:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.34:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:h:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:f:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:n:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:o:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:t:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.46:j:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:n:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:p:*:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19091

Средний

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-8rpw-q347-h7pp

github

больше 3 лет назад