medium4.0
CVE-2013-4038
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, …
Impact
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Bladecenter | Versions hs22, hs22v, hs23, hs23e, hx5 |
| Ibm | Flex System X220 Compute Node | All versions |
| Ibm | Flex System X240 Compute Node | All versions |
| Ibm | Flex System X440 Compute Node | All versions |
| Ibm | System X Idataplex Dx360 M2 Server | All versions |
| Ibm | System X Idataplex Dx360 M3 Server | All versions |
| Ibm | System X Idataplex Dx360 M4 Server | All versions |
| Ibm | System X3100 M4 | All versions |
| Ibm | System X3200 M3 | All versions |
| Ibm | System X3250 M3 | All versions |
| Ibm | System X3250 M4 | All versions |
| Ibm | System X3400 M2 | All versions |