medium6.5
CVE-2014-0882
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to ob…
Impact
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Integrated Management Module Firmware | Versions 3.50, 3.55, 3.56, 3.65, 3.67 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.lenovo.com/us/en/solutions/ht114525
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726
- https://support.lenovo.com/us/en/solutions/ht114525
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726