Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM 1754 GCM16和GCM32 Global Console Managers 权限许可和访问控制漏洞
Vulnerability Description
IBM 1754 GCM16和GCM32 Global Console Managers（GCM）都是美国IBM公司的1754系列KVM切换器产品。该产品支持AES加密、LDAP和智能卡/通用访问卡（CAC）读取器等，可实现集中式身份验证和本地或远程系统访问。 使用1.20.20.23447之前版本固件的IBM 1754 GCM16和GCM32 GCM交换机的prodtest.php脚本中存在安全漏洞。远程攻击者可通过’filename‘参数利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A