CVE-2013-3609 in H8dgu-f
Zusammenfassung (Englisch)
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
21.05.2013
Veröffentlichung
07.09.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 64873 | Supermicro H8dgu-f Intelligent Platform Management PrivilegeCallBack erweiterte Rechte | 20 | Nicht definiert | Nicht definiert | CVE-2013-3609 |