CVE-2012-4838
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow...
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
Exploit likelihood
What each source reports
NVD Score used
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
- Record
CVE-2012-4838- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
- Record
CVE-2012-4838- Updated
- 2026-11-02
EUVDEUVD-2012-4763 No score
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
- Record
EUVD-2012-4763- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xfh6-vvc8-gjch No score
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow...
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.
- Record
GHSA-xfh6-vvc8-gjch- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4838 is a low vulnerability (CVSS 1.9) in Ibm Flex System Chassis Management Module, published December 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.
References
ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8
exchange.xforce.ibmcloud.com/vulnerabilities/79020
www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001
nvd.nist.gov/vuln/detail/CVE-2012-4838
github.com/advisories/GHSA-xfh6-vvc8-gjch