Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2010-2655 | First vendor Publication | 2010-07-08 |
Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:L/Au:S/C:P/I:N/A:N) | |||
---|---|---|---|
Cvss Base Score | 4 | Attack Range | Network |
Cvss Impact Score | 2.9 | Attack Complexity | Low |
Cvss Expoit Score | 8 | Authentication | Requires single instance |
Calculate full CVSS 2.0 Vectors scores |
Detail
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2655 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25) |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
66124 | IBM BladeCenter Advanced Management Module private/file_management.php DIR Pa... IBM BladeCenter Advanced Management Module contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the 'private/file_management.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'DIR' parameter. This directory traversal attack would allow the attacker to access arbitrary files. |
Sources (Detail)
Source | Url |
---|
Alert History
Date | Informations |
---|---|
2024-11-28 23:08:04 |
|
2024-11-28 12:22:24 |
|
2020-05-23 01:42:21 |
|
2020-05-23 00:26:06 |
|
2016-06-28 18:15:42 |
|
2016-04-26 19:57:16 |
|
2013-05-10 23:28:52 |
|