Fujitsu PRIMERGY BX300 Blade Server Information Disclosure Vulnerability

Bugtraq ID:	24761
Class:	Access Validation Error
CVE:	CVE-2007-3012
Remote:	Yes
Local:	No
Published:	Jul 04 2007 12:00AM
Updated:	Jul 05 2007 05:47PM
Credit:	RedTeam Pentesting GmbH is credited with discovering this issue.
Vulnerable:	Fujitsu PRIMERGY BX300 0
Not Vulnerable:

Fujitsu PRIMERGY BX300 Blade Server Information Disclosure Vulnerability

Fujitsu PRIMERGY BX300 is prone to a remote information-disclosure vulnerability because the device fails to properly authenticate users prior to granting access to sensitive information.

Exploiting this issue allows remote attackers to gain access to potentially sensitive configuration information from affected devices. This may aid them in further attacks.

Fujitsu PRIMERGY BX300 Blade Server Information Disclosure Vulnerability

Attackers may use a browser to exploit this issue.

Fujitsu PRIMERGY BX300 Blade Server Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Fujitsu PRIMERGY BX300 Blade Server Information Disclosure Vulnerability

References:

• Fujitsu Homepage (Fujitsu)
  
• Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure (RedTeam Pentesting GmbH)