5

CVE-2010-2656

Exploit
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Advanced Management Module Update l Version <= 2.48
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.00
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.01
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.20
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.20 Update f
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.25
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.25 Update e
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.25 Update i
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.26 Update b
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.26 Update e
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.26 Update h
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.26 Update i
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.26 Update k
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.28 Update g
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.32 Update d
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.34 Update b
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.34 Update e
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.36 Update d
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.36 Update g
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.36 Update h
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.36 Update k
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update d
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update f
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update i
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update n
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update o
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 1.42 Update t
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.46 Update c
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.46 Update j
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.48 Update c
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.48 Update d
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.48 Update g
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.48 Update n
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.50 Update c
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.50 Update g
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.50 Update k
   Ibm ≫ Bladecenter
Ibm ≫ Advanced Management Module Version 2.50 Update p
   Ibm ≫ Bladecenter
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.46% 0.823
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dsecrg.com/pages/vul/show.php?id=154
Exploit
http://www.exploit-db.com/exploits/14237/
Exploit
http://www.securityfocus.com/bid/41383
Exploit
http://osvdb.org/66123