PT-2014-5073 · Ibm · Ibm Gcm16+1

Alejandro Alvarez Bravo · Publicado 2014-08-17 · Atualizado 2017-08-29 · CVE-2014-3081

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447

Description The issue allows remote authenticated users to read arbitrary files. This is achieved via the filename parameter in the prodtest.php file.

Recommendations For firmware versions before 1.20.20.23447, update the firmware to version 1.20.20.23447 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-3081

Produtos afetados

Ibm Gcm16

Ibm Gcm32

Referências · 7

• 🔥 https://exploit-db.com/exploits/34132 · Exploit
• 🔥 http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html · Exploit
• 🔥 http://exploit-db.com/exploits/34132 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3081 · Nota de Segurança
• http://seclists.org/fulldisclosure/2014/Jul/113 · Nota
• http://ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93930 · Nota