PT-2013-4786 · Ibm · Ibm Bladecenter+1

Publicado 2013-08-16 · Atualizado 2017-08-29 · CVE-2013-4007

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM BladeCenter systems with Advanced Management Module (AMM) firmware versions prior to BBET64G and BPET64G

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system.

Recommendations For IBM BladeCenter systems with AMM firmware versions prior to BBET64G, update to firmware version BBET64G or later. For IBM BladeCenter systems with AMM firmware versions prior to BPET64G, update to firmware version BPET64G or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4007

Produtos afetados

Advanced Management Module

Ibm Bladecenter

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4007 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4007 · Nota de Segurança
• http://ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093491 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85274 · Nota