CVE-2014-3081

prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
ibmglobal_console_manager_16_firmware
𝑥
≤ 1.20.0.22575
ibmglobal_console_manager_32_firmware
𝑥
≤ 1.20.0.22575
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
http://seclists.org/fulldisclosure/2014/Jul/113
http://www.exploit-db.com/exploits/34132/
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
https://exchange.xforce.ibmcloud.com/vulnerabilities/93930
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
http://seclists.org/fulldisclosure/2014/Jul/113
http://www.exploit-db.com/exploits/34132/
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
https://exchange.xforce.ibmcloud.com/vulnerabilities/93930