PT-2009-3824 · Ibm · Ibm Bladecenter Advanced Management Module

Publicado 2009-04-13 · Atualizado 2018-10-10 · CVE-2009-1290

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module (AMM) (affected versions not specified)

Description The issue affects the web administration interface of the Advanced Management Module (AMM) on the IBM BladeCenter. It involves multiple cross-site request forgery (CSRF) vulnerabilities that allow remote attackers to hijack the authentication of administrators. This can be demonstrated by a power-off request to the "private/blade power action" script, which can be exploited to perform unauthorized actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2009-1290

Produtos afetados

Ibm Bladecenter Advanced Management Module

Referências · 8

• 🔥 http://securityfocus.com/bid/34447 · Exploit
• 🔥 https://exploit-db.com/exploits/32896 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1290 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1290 · Nota
• http://securityfocus.com/archive/1/502582/100/0/threaded · Nota
• http://osvdb.org/53660 · Nota
• http://louhinetworks.fi/advisory/ibm_090409.txt · Nota
• http://securitytracker.com/id?1022025 · Nota