PT-2025-6726 · Ibm · Ibm Hardware Management Console

Published 2025-02-14 · Updated 2025-08-18 · CVE-2024-56477

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console version 10.3.1050.0

Description The issue allows an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Recommendations For IBM Power Hardware Management Console version 10.3.1050.0, consider restricting access to sensitive files and directories until a patch is available. As a temporary workaround, avoid using URL requests that contain "dot dot" sequences (/../) to prevent directory traversal.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-56477

Affected Products

Ibm Hardware Management Console

References · 8

• https://osv.dev/vulnerability/CVE-2024-56477 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56477 · Security Note
• https://ibm.com/support/pages/node/7183224 · Vendor Advisory
• https://t.me/cvedetector/18107 · Telegram Post
• https://t.me/cveNotify/132704 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1890463076274556984 · Twitter Post
• https://twitter.com/CVEnew/status/1890426116965277727 · Twitter Post
• https://t.me/cvenotify/111396 · Telegram Post