CyberSec.Space Logo
Back to CVE Browser

CVE-2010-2656

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0710%
EPSS Percentile13.77th
PublishedJul 8, 2010
Last ModifiedApr 29, 2026

Vulnerability Description

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.

Affected Platforms (CPE)

🔌
Ibm

Advanced Management Module

<= 2.48
🔌
Ibm

Advanced Management Module

= 1.00
🔌
Ibm

Advanced Management Module

= 1.01
🔌
Ibm

Advanced Management Module

= 1.20
🔌
Ibm

Advanced Management Module

= 1.20
🔌
Ibm

Advanced Management Module

= 1.25
🔌
Ibm

Advanced Management Module

= 1.25
🔌
Ibm

Advanced Management Module

= 1.25
🔌
Ibm

Advanced Management Module

= 1.26
🔌
Ibm

Advanced Management Module

= 1.26
🔌
Ibm

Advanced Management Module

= 1.26
🔌
Ibm

Advanced Management Module

= 1.26
🔌
Ibm

Advanced Management Module

= 1.26
🔌
Ibm

Advanced Management Module

= 1.28
🔌
Ibm

Advanced Management Module

= 1.32
🔌
Ibm

Advanced Management Module

= 1.34
🔌
Ibm

Advanced Management Module

= 1.34
🔌
Ibm

Advanced Management Module

= 1.36
🔌
Ibm

Advanced Management Module

= 1.36
🔌
Ibm

Advanced Management Module

= 1.36
🔌
Ibm

Advanced Management Module

= 1.36
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 1.42
🔌
Ibm

Advanced Management Module

= 2.46
🔌
Ibm

Advanced Management Module

= 2.46
🔌
Ibm

Advanced Management Module

= 2.48
🔌
Ibm

Advanced Management Module

= 2.48
🔌
Ibm

Advanced Management Module

= 2.48
🔌
Ibm

Advanced Management Module

= 2.48
🔌
Ibm

Advanced Management Module

= 2.50
🔌
Ibm

Advanced Management Module

= 2.50
🔌
Ibm

Advanced Management Module

= 2.50
🔌
Ibm

Advanced Management Module

= 2.50

References & Advisories

🔗 http://dsecrg.com/pages/vul/show.php?id=154
🔗 http://osvdb.org/66123
🔗 http://www.exploit-db.com/exploits/14237/
🔗 http://www.securityfocus.com/bid/41383
🔗 http://dsecrg.com/pages/vul/show.php?id=154
🔗 http://osvdb.org/66123
🔗 http://www.exploit-db.com/exploits/14237/
🔗 http://www.securityfocus.com/bid/41383

Related Vulnerabilities

CVE-2009-393510.0

Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx an...

CVE-2009-12906.8

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (...

CVE-2013-67186.4

The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to ...

CVE-2018-77976.1

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Moni...