CVE:CVE-2014-0860
CNNVD:CNNVD-201407-159
IBM BladeCenter Advanced Management Module（AMM）、IBM Integrated Management Module（IMM）和IBM Integrated Management Module II（IMM2）都是美国IBM公司的用于服务器中的集成管理模块。该模块主要用于远程管理服务器。
使用3.65及之前版本固件的IBM BladeCenter AMM、使用1.36 及之前版本固件的IBM IMM、使用3.65及之前版本固件的IBM IMM2中存在安全漏洞，该漏洞源于程序存储明文IPMI证书。攻击者可利用该漏洞执行任意IPMI命令，建立blade远程控制会话。
solution:Upgrade ibm integrated_management_module_firmware to a higher version than 1.36,and avoid the version (,1.36]; Upgrade ibm integrated_management_module to a higher version than -; Upgrade ibm advanced_management_module_firmware to a higher version than 3.65,and avoid the version (,3.65]; Upgrade ibm advanced_management_module to a higher version than -; Upgrade ibm integrated_management_module_ii_firmware to a higher version than 3.65,and avoid the version (,3.65]; Upgrade ibm integrated_management_module_ii to a higher version than -