CVE-2013-4038

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2013-08-09

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Bladecenter (Ibm)
• Flex System X220 Compute Node (Ibm)
• Flex System X240 Compute Node (Ibm)
• Flex System X440 Compute Node (Ibm)
• System X3100 M4 (Ibm)
• System X3200 M3 (Ibm)
• System X3250 M3 (Ibm)
• System X3250 M4 (Ibm)
• System X3400 M2 (Ibm)
• System X3400 M3 (Ibm)
• System X3500 M2 (Ibm)
• System X3500 M3 (Ibm)
• System X3500 M4 (Ibm)
• System X3530 M4 (Ibm)
• System X3550 M2 (Ibm)
• System X3550 M3 (Ibm)
• System X3550 M4 (Ibm)
• System X3620 M3 (Ibm)
• System X3630 M3 (Ibm)
• System X3630 M4 (Ibm)
• System X3650 M2 (Ibm)
• System X3650 M3 (Ibm)
• System X3650 M4 (Ibm)
• System X3690 X5 (Ibm)
• System X3750 M4 (Ibm)
• System X3850 X5 (Ibm)
• System X3950 X5 (Ibm)
• System X Idataplex Dx360 M2 Server (Ibm)
• System X Idataplex Dx360 M3 Server (Ibm)
• System X Idataplex Dx360 M4 Server (Ibm)

References

• http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86174