CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Input Validation
Summary: the web interface in the intelligent platform management interface (ipmi) implementation on supermicro h8dc*, h8dg*, h8scm-f, h8sgl-f, h8sm*, x7sp*, x8dt*, x8si*, x9dax-*, x9db*, x9dr*, x9qr*, x9sbaa-f, x9sc*, x9spu-f, and x9sr* devices relies on javascript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the privilegecallback function.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-09-08
Last Modified Date: 2017-11-15