CVEvulnerability

CVE-2013-4038

4.0 MEDIUM Published 2013-08-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-310

Description

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.

Affected configurations

• ibm bladecenter hs22 • ibm bladecenter hs22v • ibm bladecenter hs23 • ibm bladecenter hs23e • ibm bladecenter hx5 • ibm flex system x220 compute node • ibm flex system x240 compute node • ibm flex system x440 compute node • ibm system x idataplex dx360 m2 server • ibm system x idataplex dx360 m3 server • ibm system x idataplex dx360 m4 server • ibm system x3100 m4 • ibm system x3200 m3 • ibm system x3250 m3 • ibm system x3250 m4 • ibm system x3400 m2 • ibm system x3400 m3 • ibm system x3500 m2 • ibm system x3500 m3 • ibm system x3500 m4 • ibm system x3530 m4 • ibm system x3550 m2 • ibm system x3550 m3 • ibm system x3550 m4 • ibm system x3620 m3 • ibm system x3630 m3 • ibm system x3630 m4 • ibm system x3650 m2 • ibm system x3650 m3 • ibm system x3650 m4 • ibm system x3690 x5 • ibm system x3750 m4 • ibm system x3850 x5 • ibm system x3950 x5

Related

Weakness · not in database (1)

References