Vulnerability Details : CVE-2009-1289
Potential exploit
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.
Vulnerability category: Information leak
Products affected by CVE-2009-1289
- cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*
- cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-1289
0.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 41 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-1289
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST |
CWE ids for CVE-2009-1289
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-1289
Jump to