CVE-2013-4038 Information disclosure in n/a
Attackers with local access can read sensitive IPMI passwords stored in cleartext on IBM server management modules.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-4038?
CVE-2013-4038 is a medium-severity vulnerability in n/a, published on 9 Aug 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.
Weakness: CWE-310
Which versions are affected by CVE-2013-4038?
It affects 30 products.
Products include Ibm Bladecenter, Ibm Flex System X220 Compute Node, Ibm Flex System X240 Compute Node, Ibm Flex System X440 Compute Node, Ibm System X3100 M4, Ibm System X3200 M3 and 24 more.
How do I fix CVE-2013-4038?
No fix has been published for CVE-2013-4038 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-4038 being exploited?
There is no known exploitation of CVE-2013-4038 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-g9qg-48f9-44pg.