CVE-2013-4038 The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext f...
MediumCVSS 4.0
EPSS 0.78%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bladecenter | = hs22 | No fix listed |
| ibm bladecenter | = hs22v | No fix listed |
| ibm bladecenter | = hs23 | No fix listed |
| ibm bladecenter | = hs23e | No fix listed |
| ibm bladecenter | = hx5 | No fix listed |
| ibm flex system x220 compute node | All versions | No fix listed |
| ibm flex system x240 compute node | All versions | No fix listed |
| ibm flex system x440 compute node | All versions | No fix listed |
| ibm system x idataplex dx360 m2 server | All versions | No fix listed |
| ibm system x idataplex dx360 m3 server | All versions | No fix listed |
| ibm system x idataplex dx360 m4 server | All versions | No fix listed |
| ibm system x3100 m4 | All versions | No fix listed |
| ibm system x3200 m3 | All versions | No fix listed |
| ibm system x3250 m3 | All versions | No fix listed |
| ibm system x3250 m4 | All versions | No fix listed |
| ibm system x3400 m2 | All versions | No fix listed |
| ibm system x3400 m3 | All versions | No fix listed |
| ibm system x3500 m2 | All versions | No fix listed |
| ibm system x3500 m3 | All versions | No fix listed |
| ibm system x3500 m4 | All versions | No fix listed |
| ibm system x3530 m4 | All versions | No fix listed |
| ibm system x3550 m2 | All versions | No fix listed |
| ibm system x3550 m3 | All versions | No fix listed |
| ibm system x3550 m4 | All versions | No fix listed |
| ibm system x3620 m3 | All versions | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm system x3630 m3 | All versions | No fix listed |
| ibm system x3630 m4 | All versions | No fix listed |
| ibm system x3650 m2 | All versions | No fix listed |
| ibm system x3650 m3 | All versions | No fix listed |
| ibm system x3650 m4 | All versions | No fix listed |
| ibm system x3690 x5 | All versions | No fix listed |
| ibm system x3750 m4 | All versions | No fix listed |
| ibm system x3850 x5 | All versions | No fix listed |
| ibm system x3950 x5 | All versions | No fix listed |
References
- www.ibm.com vendor-advisory
- imm-cve20134038-ipmi-cleartext(86174) vdb-entry