CVE-2013-4030
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Integrated Management Module II（IMM2）是美国IBM公司的一个用于服务器中的新一代集成管理模块。该模块是独立于服务器系统，可通过一个单独的IP使用Web和虚拟端口方式直接启动、停止和管理远程服务器。 IBM System X和Flex System服务器中的IMM 2 1.00至2.00版本中存在加密问题漏洞，该漏洞源于程序支持短密钥的SSL加密套件。远程攻击者可通过对SSL或TLS流量实施暴力破解攻击利用该漏洞破坏密码保护机制。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-4030
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
IBM System X和Flex System服务器 Integrated Management Module 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Integrated Management Module II（IMM2）是美国IBM公司的一个用于服务器中的新一代集成管理模块。该模块是独立于服务器系统，可通过一个单独的IP使用Web和虚拟端口方式直接启动、停止和管理远程服务器。 IBM System X和Flex System服务器中的IMM 2 1.00至2.00版本中存在加密问题漏洞，该漏洞源于程序支持短密钥的SSL加密套件。远程攻击者可通过对SSL或TLS流量实施暴力破解攻击利用该漏洞破坏密码保护机制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-4030
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-4030
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-4030 (2)
Same Patch Batch · n/a · 2014-01-21 · 35 CVEs total
| CVE-2010-5295 | WordPress 跨站脚本漏洞 | |
| CVE-2013-6305 | IBM Platform Symphony 加密问题漏洞 | |
| CVE-2013-6872 | Collabtive managetimetracker.php SQL注入漏洞 | |
| CVE-2014-1452 | FreeBSD bsnmpd 基于栈的缓冲区溢出漏洞 | |
| CVE-2014-1618 | Professional Designer UAEPD Shopping Cart Script SQL注入漏洞 | |
| CVE-2014-1619 | Cubic CMS SQL注入漏洞 | |
| CVE-2014-1620 | HGB 跨站脚本漏洞 | |
| CVE-2010-5293 | WordPress wp-includes/comment.php 权限许可和访问控制漏洞 | |
| CVE-2010-5294 | WordPress 跨站脚本漏洞 | |
| CVE-2013-7219 | Joomla! 2Glux Sexy Polling SQL注入漏洞 | |
| CVE-2010-5296 | WordPress 权限许可和访问控制漏洞 | |
| CVE-2010-5297 | WordPress 权限许可和访问控制漏洞 | |
| CVE-2011-5270 | WordPress‘wp-admin/press-this.php’权限许可和访问控制漏洞 | |
| CVE-2012-6633 | WordPress wp-includes/default-filters.php 跨站脚本漏洞 | |
| CVE-2012-6634 | WordPress wp-admin/media-upload.php 权限许可和访问控制漏洞 | |
| CVE-2012-6635 | WordPress 权限许可和访问控制漏洞 | |
| CVE-2013-5429 | IBM Tivoli Federated Identity Manager和IBM Tivoli Federated Identity Manager Business Gatew | |
| CVE-2013-2152 | Red Hat Enterprise Virtualization Manager 本地提权漏洞 | |
| CVE-2013-0157 | util-linux Package ‘mount’和‘umount’信息泄露漏洞 | |
| CVE-2013-0339 | libxml2 权限许可和访问控制问题漏洞 |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-4030
No comments yet