CVE-2013-4030

Medium

Description

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.

SeverityMedium
CVSS4.3
Exploit probability61. percentile0.9%
ProductIbm Integrated Management Module
PublishedJan 21, 2014
First seenJan 21, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
ibm integrated_management_module_21.00, 2.00—
ibm bladecenterhs23, hs23e—
ibm flex_system_manager_node_7955No range specified—
ibm flex_system_manager_node_8731No range specified—
ibm flex_system_manager_node_8734No range specified—
ibm flex_system_x220_compute_nodeNo range specified—
ibm flex_system_x240_compute_nodeNo range specified—
ibm flex_system_x440_compute_nodeNo range specified—
ibm system_x_idataplex_direct_water_cooled_dx360_m4_serverNo range specified—
ibm system_x_idataplex_dx360_m4_serverNo range specified—
ibm system_x3100_m4No range specified—
ibm system_x3250_m4No range specified—
ibm system_x3300_m4No range specified—
ibm system_x3500_m2No range specified—
ibm system_x3500_m3No range specified—
ibm system_x3500_m4No range specified—
ibm system_x3530_m4No range specified—
ibm system_x3550_m2No range specified—
ibm system_x3550_m3No range specified—
ibm system_x3550_m4No range specified—
ibm system_x3630_m3No range specified—
ibm system_x3630_m4No range specified—
ibm system_x3630_m4_hdNo range specified—
ibm system_x3650_m2No range specified—
ibm system_x3650_m3No range specified—
ibm system_x3650_m4No range specified—
ibm system_x3650_m4_hdNo range specified—
ibm system_x3690_x5No range specified—
ibm system_x3750_m4No range specified—
ibm system_x3850_x5No range specified—
ibm system_x3950_x5No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.