Information disclosure in Ibm Flex System Manager

CVE-2014-6147

IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Flex_system_manager — versions 1.1.0, 1.2.0, 1.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)