CVEvulnerability
CVE-2014-0882
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.
Affected configurations
• ibm integrated management module firmware 3.50
• ibm integrated management module firmware 3.55
• ibm integrated management module firmware 3.56
• ibm integrated management module firmware 3.65
• ibm integrated management module firmware 3.67
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.lenovo.com/us/en/solutions/ht114525 Third Party Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/ Vendor Advisory
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726 Vendor Advisory
- https://support.lenovo.com/us/en/solutions/ht114525 Third Party Advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/ Vendor Advisory
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726 Vendor Advisory