CVE-2010-2656
Estado: ModificadaMedia (5)—
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.46%
- Percentil entre todas las CVEs puntuadas: 84
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-2656",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-07-08T12:54:47.210",
"references": [
{
"url": "http://dsecrg.com/pages/vul/show.php?id=154",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/66123",
"source": "cve@mitre.org"
},
{
"url": "http://www.exploit-db.com/exploits/14237/",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/41383",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://dsecrg.com/pages/vul/show.php?id=154",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/66123",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/14237/",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/41383",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz."
},
{
"lang": "es",
"value": "El BladeCenter de IBM con Advanced Management Module (AMM) firmware build ID BPET48L, y posiblemente otras versiones anteriores a v4.7 y v5.0, almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a los atacantes remotos descargar (1) logs o (2) archivos del núcleo mediante una petición directa, como se ha demostrado mediante una petición para private/sdc.tgz."
}
],
"lastModified": "2026-06-16T23:21:11.953",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:*:l:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC52F58A-CC17-48B4-ABB1-7470AE5FFBDE",
"versionEndIncluding": "2.48"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "478D3D8F-338F-494A-A3FF-5B1007DD90CF"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF211E79-BC73-4D6A-8153-19AEE82345D4"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "231325FC-D582-41B6-8CF4-07FEE414D19B"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.20:f:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2F265EA-4CDD-4B6F-9212-74D395F6034A"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A01662B-8A72-4011-AA27-5A12C6B56FDA"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.25:e:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DFF42E1-162B-46EA-BDB6-E3452201550A"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.25:i:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBFF96E9-59AB-40D8-A531-7FB36A4B1E84"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.26:b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EACAF1A3-EADC-4E15-AE0C-76F6E1FE5219"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.26:e:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E5AA726-67C7-43EF-AB4C-DC9EC2AB39A5"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.26:h:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B967754-11D2-4903-AB8E-6608FD0FD836"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.26:i:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F293BB5-4169-49EC-8DF4-3F0575F7F4D3"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.26:k:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "178B4552-5FE7-439F-86C4-5123F23F4117"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.28:g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58BC7F2-438E-4681-9741-7A8DC581DE3B"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.32:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86CF34AF-A48D-4CE0-9144-5209A16C9C86"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.34:b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A555F94B-2D23-4ED6-947C-CBEC1A2768C1"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.34:e:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEC68099-D84F-4516-8D6A-3580F49DF4B0"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.36:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "304A13AA-E04B-43B6-84DD-3235170F5C55"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.36:g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F26C2C6D-D2E1-42D6-A700-53AD1D3A3876"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.36:h:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F61FF30-2B40-44A3-8257-69E92EC0DE23"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.36:k:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF1B6195-649E-4577-99F3-B04C0B762FF4"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "377C2D86-620B-4BC8-A118-9B52EBC609D5"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:f:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9BB015A-30D6-4942-BAC6-DD96E151B8CA"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:i:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B916267-C840-48C5-B3DC-73BCDA9C91C8"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:n:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D979D22-C158-41DE-8AFA-EF3C040B1F58"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:o:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66B0F30E-1E3F-4BD4-BE24-0A26C4CA56E1"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:1.42:t:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C927655-9D61-4921-AA51-27E7D6A2007C"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ED4EBB8-760C-4DA6-8404-3BB104D08656"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.46:j:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C65476D1-5104-4DE1-B0DF-FBD811F74ACB"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.48:c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2F8CD93-5278-43F6-87E0-0FED8ACD330A"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.48:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6460DE58-67FA-44AE-B20F-A60BAC07F516"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.48:g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EAE737-288C-4F0E-A510-44C8B4B94E70"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.48:n:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D29A5D9C-E5F7-4228-A63F-82F2A55E242E"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.50:c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA87A054-0FF2-407C-95C7-21CC7C98801C"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.50:g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BDD8DB8-3B3B-4A10-BEF5-703D6DB7E874"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.50:k:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D10BE3E-7AB3-4F75-BB38-BB9EB5D27BC7"
},
{
"criteria": "cpe:2.3:h:ibm:advanced_management_module:2.50:p:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2274C274-E094-4F01-9D81-B5FC1FAD3F8D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8C9F62C-79C0-4079-824C-E076DA20CE2F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}