CVEvulnerability

CVE-2010-2655

4.0 MEDIUM Published 2010-07-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-07-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.

Affected configurations

• ibm advanced management module (<= 2.48) • ibm advanced management module 1.00 • ibm advanced management module 1.01 • ibm advanced management module 1.20 • ibm advanced management module 1.25 • ibm advanced management module 1.26 • ibm advanced management module 1.28 • ibm advanced management module 1.32 • ibm advanced management module 1.34 • ibm advanced management module 1.36 • ibm advanced management module 1.42 • ibm advanced management module 2.46 • ibm advanced management module 2.48 • ibm advanced management module 2.50

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References