CVE-2013-4038

Severity Score

4.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.

La implementación Intelligent Platform Management Interface (IPMI) en Integrated Management Module (IMM) y Integrated Management Module II (IMM2) en servidores IBM BladeCenter, Flex System, System x iDataPlex, y System x3###, utiliza texto claro para el almacenamiento de contraseñas, lo que permite a atacantes, según el contexto, obtener información confidencial mediante la lectura de un archivo.

*Credits: N/A

CVSS Scores

NISTv2 4.0

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-06-07 CVE Reserved
2013-08-09 CVE Published
2024-06-29 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (2)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/86174	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs22 Search vendor "Ibm" for product "Bladecenter" and version "hs22"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs22v Search vendor "Ibm" for product "Bladecenter" and version "hs22v"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs23 Search vendor "Ibm" for product "Bladecenter" and version "hs23"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hs23e Search vendor "Ibm" for product "Bladecenter" and version "hs23e"		-		Affected
Ibm Search vendor "Ibm"		Bladecenter Search vendor "Ibm" for product "Bladecenter"				hx5 Search vendor "Ibm" for product "Bladecenter" and version "hx5"		-		Affected
Ibm Search vendor "Ibm"		Flex System X220 Compute Node Search vendor "Ibm" for product "Flex System X220 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		Flex System X240 Compute Node Search vendor "Ibm" for product "Flex System X240 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		Flex System X440 Compute Node Search vendor "Ibm" for product "Flex System X440 Compute Node"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M2 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M2 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M3 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M3 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X Idataplex Dx360 M4 Server Search vendor "Ibm" for product "System X Idataplex Dx360 M4 Server"				-		-		Affected
Ibm Search vendor "Ibm"		System X3100 M4 Search vendor "Ibm" for product "System X3100 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3200 M3 Search vendor "Ibm" for product "System X3200 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3250 M3 Search vendor "Ibm" for product "System X3250 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3250 M4 Search vendor "Ibm" for product "System X3250 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3400 M2 Search vendor "Ibm" for product "System X3400 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3400 M3 Search vendor "Ibm" for product "System X3400 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M2 Search vendor "Ibm" for product "System X3500 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M3 Search vendor "Ibm" for product "System X3500 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3500 M4 Search vendor "Ibm" for product "System X3500 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3530 M4 Search vendor "Ibm" for product "System X3530 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M2 Search vendor "Ibm" for product "System X3550 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M3 Search vendor "Ibm" for product "System X3550 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3550 M4 Search vendor "Ibm" for product "System X3550 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3620 M3 Search vendor "Ibm" for product "System X3620 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3630 M3 Search vendor "Ibm" for product "System X3630 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3630 M4 Search vendor "Ibm" for product "System X3630 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M2 Search vendor "Ibm" for product "System X3650 M2"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M3 Search vendor "Ibm" for product "System X3650 M3"				-		-		Affected
Ibm Search vendor "Ibm"		System X3650 M4 Search vendor "Ibm" for product "System X3650 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3690 X5 Search vendor "Ibm" for product "System X3690 X5"				-		-		Affected
Ibm Search vendor "Ibm"		System X3750 M4 Search vendor "Ibm" for product "System X3750 M4"				-		-		Affected
Ibm Search vendor "Ibm"		System X3850 X5 Search vendor "Ibm" for product "System X3850 X5"				-		-		Affected
Ibm Search vendor "Ibm"		System X3950 X5 Search vendor "Ibm" for product "System X3950 X5"				-		-		Affected