The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/86173 - |
Information
Published : 2013-08-09 23:55
Updated : 2024-11-21 01:54
NVD link : CVE-2013-4037
Mitre link : CVE-2013-4037
CVE.ORG link : CVE-2013-4037
JSON object : View
Products Affected
ibm
- system_x3200_m3
- system_x3850_x5
- system_x3500_m4
- system_x3550_m2
- system_x3750_m4
- system_x3400_m3
- system_x3400_m2
- system_x3650_m4
- flex_system_x220_compute_node
- system_x3550_m4
- bladecenter
- flex_system_x440_compute_node
- system_x3500_m3
- system_x3250_m3
- system_x3630_m3
- system_x3950_x5
- system_x3250_m4
- system_x3630_m4
- system_x_idataplex_dx360_m4_server
- system_x3500_m2
- system_x3620_m3
- flex_system_x240_compute_node
- system_x3690_x5
- system_x3100_m4
- system_x3530_m4
- system_x_idataplex_dx360_m3_server
- system_x3550_m3
- system_x_idataplex_dx360_m2_server
- system_x3650_m3
- system_x3650_m2
CWE