Vulnerability Details CVE-2014-0882
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- https://support.lenovo.com/us/en/solutions/ht114525
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726
- https://support.lenovo.com/us/en/solutions/ht114525
- https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
- https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726
Products affected by CVE-2014-0882
-
cpe:2.3:h:ibm:flex_system_manager_7955:-
-
cpe:2.3:h:ibm:flex_system_manager_8731:-
-
cpe:2.3:h:ibm:flex_system_x220:-
-
cpe:2.3:h:ibm:flex_system_x240:-
-
cpe:2.3:h:ibm:flex_system_x440:-
-
cpe:2.3:h:ibm:nextscale_nx360_m4:-
-
cpe:2.3:h:ibm:system_x3100_m4:-
-
cpe:2.3:h:ibm:system_x3250_m4:-
-
cpe:2.3:h:ibm:system_x3500_m4:-
-
cpe:2.3:h:ibm:system_x3530_m4:-
-
cpe:2.3:h:ibm:system_x3550_m4:-
-
cpe:2.3:h:ibm:system_x3630_m4:-
-
cpe:2.3:h:ibm:system_x3650_m4:-
-
cpe:2.3:h:ibm:system_x3750_m4:-
-
cpe:2.3:h:ibm:system_x_idataplex_dx360_m4:-
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.50
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.55
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.56
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.65
-
cpe:2.3:o:ibm:integrated_management_module_firmware:3.67