Vulnerability in Ibm Bladecenter
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.
Affected products
- Ibm Bladecenter — versions hs23, hs23e
- Ibm Flex_system_manager_node_7955
- Ibm Flex_system_manager_node_8731
- Ibm Flex_system_manager_node_8734
- Ibm Flex_system_x220_compute_node
- Ibm Flex_system_x240_compute_node
- Ibm Flex_system_x440_compute_node
- Ibm Integrated_management_module_2 — versions 1.00, 2.00
- Ibm System_x3100_m4
- Ibm System_x3250_m4
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)