IBM 1754 GCM16 and GCM32 Global Console Managers Unspecified Arbitrary File Read Vulnerability

Bugtraq ID:	68779
Class:	Design Error
CVE:	CVE-2014-3081
Remote:	Yes
Local:	No
Published:	Jul 14 2014 12:00AM
Updated:	Jul 22 2014 06:39AM
Credit:	Alejandro Alvarez Bravo
Vulnerable:
Not Vulnerable:

IBM 1754 GCM16 and GCM32 Global Console Managers Unspecified Arbitrary File Read Vulnerability

IBM 1754 GCM16 and GCM32 Global Console Managers are prone to an unspecified arbitrary file read vulnerability.

An attacker can exploit this issue to read an arbitrary files in the context of the user running the application.

The following versions are vulnerable:

IBM 1754 GCM16 Global Console Manager running firmware 1.20.0.22575 and prior
IBM 1754 GCM32 Global Console Manager running firmware 1.20.0.22575 and prior

IBM 1754 GCM16 and GCM32 Global Console Managers Unspecified Arbitrary File Read Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM 1754 GCM16 and GCM32 Global Console Managers Unspecified Arbitrary File Read Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM 1754 GCM16 and GCM32 Global Console Managers Unspecified Arbitrary File Read Vulnerability

References: