CVE-2010-2656 | BDVDB-2026-42484 Detail

Description#

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/14237/
http://www.securityfocus.com/bid/41383
http://dsecrg.com/pages/vul/show.php?id=154
http://osvdb.org/66123

Exploit#

http://www.exploit-db.com/exploits/14237/

History#

Version 12010-07-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.