CVE-2010-2655 | BDVDB-2026-42483 Detail

Description#

Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/14237/
http://osvdb.org/66124
http://www.securityfocus.com/bid/41383
http://dsecrg.com/pages/vul/show.php?id=154

Exploit#

http://www.exploit-db.com/exploits/14237/

History#

Version 12010-07-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.