CVE-2015-3324 in ThinkServer System Manager
Сводка (Английский)
The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 does not validate server certificates during an "encrypted remote KVM session," which allows man-in-the-middle attackers to spoof servers.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
16.04.2015
Раскрытие
16.04.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 74995 | Lenovo ThinkServer System Manager Certificate слабое шифрование | 310 | Не определено | Официальное исправление | CVE-2015-3324 |