CVE-2010-2656

Опубликовано: 08 июл. 2010

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.

Ссылки

http://dsecrg.com/pages/vul/show.php?id=154
Exploit
http://osvdb.org/66123
http://www.exploit-db.com/exploits/14237/
Exploit
http://www.securityfocus.com/bid/41383
Exploit
http://dsecrg.com/pages/vul/show.php?id=154
Exploit
http://osvdb.org/66123
http://www.exploit-db.com/exploits/14237/
Exploit
http://www.securityfocus.com/bid/41383
Exploit

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:h:ibm:advanced_management_module:*:l:*:*:*:*:*:*

Версия до 2.48 (включая)

cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:h:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.26:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.28:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.32:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.34:b:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.34:e:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:h:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.36:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:f:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:i:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:n:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:o:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:1.42:t:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.46:j:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:d:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.48:n:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:c:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:g:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:k:*:*:*:*:*:*

cpe:2.3:h:ibm:advanced_management_module:2.50:p:*:*:*:*:*:*

cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17218

Средний

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-2424-x5j2-7rx4

github

больше 3 лет назад