CVE-2014-0882

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Integrated Management Module Firmware
Vendor
CVE Published:
25 April 2018

Summary

Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.

References

https://support.lenovo.com/us/en/solutions/ht114525
x_refsource_CONFIRM
https://www.ibm.com/blogs/psirt/security-bulletin-account...
x_refsource_CONFIRM
https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.