packetstormsecurity.com
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html CVE-2014-3081
IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities
Record summary
CVE-2014-3081 has a selected CVSS score of 6.3; EIP currently links 1 catalogued exploit.
Description
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM GCM16/32 1.20.0.22575 - Multiple VulnerabilitiesExploitDB exploitby Alejandro Alvarez BravoNot analyzed1 file
References
620140721 IBM GCM16/32 v1.20.0.22575 vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2014/Jul/113 34132exploit
http://www.exploit-db.com/exploits/34132 ibm.comConfirmation
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 ibm-gcm-cve20143081-file-read(93930)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/93930 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3081