Vulnerability CVE-2009-1290 - CERT Civis.Net

Vulnerability Name:

CVE-2009-1290 (CCN-49788)

Assigned:

2009-04-09

Published:

2009-04-09

Updated:

2018-10-10

Summary:

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: BugTraq Mailing List, Thu Apr 09 2009 - 05:38:52 CDT
IBM BladeCenter Advanced Management Module Multiple vulnerabilities

Source: MITRE
Type: CNA
CVE-2009-1290

Source: OSVDB
Type: UNKNOWN
53660

Source: CCN
Type: SA34626
IBM BladeCenter Advanced Management Module Multiple Vulnerabilities

Source: CCN
Type: SECTRACK ID: 1022025
IBM BladeCenter Flaws Permit Cross-Site Scripting and Cross-Site Request Forgery Attacks

Source: SECTRACK
Type: UNKNOWN
1022025

Source: CCN
Type: IBM Systems Support Web site
(BOFM enabled) (Maintenance Release) Advanced Management Module (TELCO) firmware v1.42U (BBET42U) - IBM BladeCenter

Source: MISC
Type: UNKNOWN
http://www.louhinetworks.fi/advisory/ibm_090409.txt

Source: CCN
Type: OSVDB ID: 53660
IBM BladeCenter Advanced Management Module CSRF

Source: BUGTRAQ
Type: UNKNOWN
20090409 IBM BladeCenter Advanced Management Module Multiple vulnerabilities

Source: BID
Type: Exploit
34447

Source: CCN
Type: BID-34447
IBM BladeCenter Advanced Management Module Multiple Remote Vulnerabilities

Source: XF
Type: UNKNOWN
bladecenter-management-interface-csrf(49788)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*

AND

cpe:/h:ibm:bladecenter:e:*:1881:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:e:*:7967:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:e:*:8677:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:h:*:7989:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:h:*:8852:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ht:*:8740:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ht:*:8750:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js12:*:7998:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js21:*:7988:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js21:*:8844:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js22:*:7998:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:s:*:1948:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:s:*:8886:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:t:*:8720:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:t:*:8730:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:e::1881:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:e::7967:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:e::8677:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ht::8740:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ht::8750:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:h::8852:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:h::7989:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:s::1948:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:s::8886:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:t::8730:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:t::8720:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js12::7998:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js21::7988:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js21::8844:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:js22::7998:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hc10::7996:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12::8014:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12::1916:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs12::8028:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs20::1883:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21::8853:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21::1885:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21_xm::7995:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:hs21_xm::1915:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls20::8850:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls21::7971:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:ls41::7972:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:qs21::0792:*:*:*:*:*

OR cpe:/h:ibm:bladecenter:qs22::0793:*:*:*:*:*

Denotes that component is vulnerable