Intrusion PreventionIBM.BladeCenter.Management.Module.Information.Disclosure
Description
This indicates an attack attempt against an information disclosure vulnerability in IBM bladecenter management module.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted URL. It allows a remote attacker to steal cookie-based authentication credentials and other information.
Affected Products
IBM IBM BladeCenter Managemet Module BPET48L
Impact
Information disclosure.
Malicious users may be able to bypass certain security restrictions and compromise a vulnerable system.
Recommended Actions
Apply the patch supplied by the vendor.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-02-01 | 14.540 | Name:IBM. Bladecenter. Management. Module. Information. Disclosure:IBM. BladeCenter. Management. Module. Information. Disclosure |
| ID | 26372 |
| Created | May 24, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2010-2656 |
| Exploit Prediction Score | 42.59% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | IBM |