漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Insufficient Randomness When Validating an IPMI Authenticated Session
Vulnerability Description
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IPMI 安全漏洞
Vulnerability Description
IPMI是IPMI开源的一种电脑界面规格。提供监视与控制系统中央处理器,固件以及操作系统运作状态的功能。 IPMI存在安全漏洞,该漏洞源于无法提供足够的随机性来防止会话劫持。
CVSS Information
N/A
Vulnerability Type
N/A