CVE-2013-4038
IBM BladeCenter, Flex System, System x - Cleartext Password Storage in IMM IPMI
Title source: llmDescription
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/86174
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093463
Scores
EPSS
0.0079
EPSS Percentile
52.5%
Details
CWE
CWE-310
Status
published
Products (34)
ibm/bladecenter
hs22
ibm/bladecenter
hs22v
ibm/bladecenter
hs23
ibm/bladecenter
hs23e
ibm/bladecenter
hx5
ibm/flex_system_x220_compute_node
ibm/flex_system_x240_compute_node
ibm/flex_system_x440_compute_node
ibm/system_x3100_m4
ibm/system_x3200_m3
... and 24 more
Published
Aug 09, 2013
Tracked Since
Feb 18, 2026