CVE-2009-1289: ibm advanced_management_module_firmware
CVSS: 4.0v2.0MediumModified
Published 13-04-2009Last modified 07-08-2024
Vulnerability summary
CVE-2009-1289 is a medium (CVSS 4.0) vulnerability in ibm advanced_management_module_firmware. EPSS estimates a 1.09% chance of exploitation in the next 30 days, higher than 64.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
4.0/10
010
Medium · v2.0 (NVD)EPSS score
1.09%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 13-04-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.
CVSS metrics
1 score · 1 source · 1 versionMedium 4.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
1.09%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
0.00 pp
From 1.09% on 20-09-2026
20-09-202620-10-2026
EPSS score1.09%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (louhinetworks.fi)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- advanced_management_module_firmware1.36h
- bladecentere | h | hc10 | hs12 | hs20 | hs21 | hs21_xm | ht | js12 | js21 | js22 | ls20 | ls21 | ls41 | qs21 | qs22 | s | t
1 vendor · 2 products