Lucene search
MitreCVE-2009-1289HistoryApr 13, 2009 - 4:30 p.m.
CVE-2009-1289
2009-04-1316:30:00
CWE-200
mitre
web.nvd.nist.gov
26
ibm
bladecenter
amm
cve-2009-1289
access control
vulnerability
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.027
Percentile
90.5%
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.
Affected configurations
Node
ibmadvanced_management_moduleMatch1.36h
ibmbladecenterMatche1881
ORibmbladecenterMatche7967
ORibmbladecenterMatche8677
ORibmbladecenterMatchh7989
ORibmbladecenterMatchh8852
ORibmbladecenterMatchhc107996
ORibmbladecenterMatchhs121916
ORibmbladecenterMatchhs128014
ORibmbladecenterMatchhs128028
ORibmbladecenterMatchhs201883
ORibmbladecenterMatchhs211885
ORibmbladecenterMatchhs218853
ORibmbladecenterMatchhs21_xm1915
ORibmbladecenterMatchhs21_xm7995
ORibmbladecenterMatchht8740
ORibmbladecenterMatchht8750
ORibmbladecenterMatchjs127998
ORibmbladecenterMatchjs217988
ORibmbladecenterMatchjs218844
ORibmbladecenterMatchjs227998
ORibmbladecenterMatchls208850
ORibmbladecenterMatchls217971
ORibmbladecenterMatchls417972
ORibmbladecenterMatchqs210792
ORibmbladecenterMatchqs220793
ORibmbladecenterMatchs1948
ORibmbladecenterMatchs8886
ORibmbladecenterMatcht8720
ORibmbladecenterMatcht8730
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | advanced_management_module | 1.36h | cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:* |
| ibm | bladecenter | e | cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:* |
| ibm | bladecenter | e | cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:* |
| ibm | bladecenter | e | cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:* |
| ibm | bladecenter | h | cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:* |
| ibm | bladecenter | h | cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:* |
| ibm | bladecenter | hc10 | cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:* |
| ibm | bladecenter | hs12 | cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:* |
| ibm | bladecenter | hs12 | cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:* |
| ibm | bladecenter | hs12 | cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-1289
2009-04-13 16:00:00
nvd
nvd
CVE-2009-1289
2009-04-13 16:30:00
prion
prion
Code injection
2009-04-13 16:30:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.027
Percentile
90.5%
Related for CVE-2009-1289