medium6.3Public exploit code
CVE-2014-3081
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities2014-07-21 · remote · php · Verified
Impact
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Global Console Manager 16 Firmware | through 1.20.0.22575 |
| Ibm | Global Console Manager 32 Firmware | through 1.20.0.22575 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
- http://seclists.org/fulldisclosure/2014/Jul/113
- http://www.exploit-db.com/exploits/34132/
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93930
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
- http://seclists.org/fulldisclosure/2014/Jul/113
- http://www.exploit-db.com/exploits/34132/
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93930