CVE-2010-2655

Currently unrated

Key Information:

Vendor
IBM
Status
Advanced Management Module
Vendor
CVE Published:
8 July 2010

Summary

Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.

References

http://www.exploit-db.com/exploits/14237/
exploitx_refsource_EXPLOIT-DB
http://osvdb.org/66124
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/41383
vdb-entryx_refsource_BID

EPSS Score

31% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.