CVE-2012-4838 Information disclosure in n/a
Local users can obtain sensitive credentials and keys from IBM Flex System CMM and IMM2 devices via side effects of maintenance activities.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4838?
CVE-2012-4838 is a low-severity vulnerability in n/a, published on 8 Dec 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
Which versions are affected by CVE-2012-4838?
It affects 2 products.
Products include Ibm Flex System Chassis Management Module, Ibm Integrated Management Module Ii.
How do I fix CVE-2012-4838?
No fix has been published for CVE-2012-4838 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-4838 being exploited?
There is no known exploitation of CVE-2012-4838 in the wild and no public exploit code.
Sources
Also known as GHSA-xfh6-vvc8-gjch.