cbcvebase.
CVE-2010-2656
published 2010-07-08

CVE-2010-2656: The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive…

PriorityP432medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
2.46%
82.4th percentile
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.

Affected

14 ranges
VendorProductVersion rangeFixed in
ibmadvanced_management_module<= 2.48—
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
ibmadvanced_management_module——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.