{"id":"CVE-2012-4838","aliases":["EUVD-2012-4763","GHSA-xfh6-vvc8-gjch"],"status":"published","title":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow...","description":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00355,"percentile":0.29426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2012-12-08T15:00:00Z","modified":"2026-06-16T23:45:46Z","products":[{"vendor":"ibm","product":"flex_system_chassis_management_module"},{"vendor":"ibm","product":"integrated_management_module_ii"}],"references":[{"url":"https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79020","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4838"},{"url":"https://github.com/advisories/GHSA-xfh6-vvc8-gjch"}],"sources":{"cve":[{"id":"CVE-2012-4838","description":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.","status":"published","published":"2012-12-08T15:00:00Z","modified":"2024-08-06T20:50:16.926Z","updated_at":"2026-11-02T14:34:51.584538Z"}],"euvd":[{"id":"EUVD-2012-4763","description":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.","status":"published","published":"2012-12-08T15:00:00Z","modified":"2024-08-06T20:50:16Z","updated_at":"2026-11-03T01:56:06.845275Z"}],"ghsa":[{"id":"GHSA-xfh6-vvc8-gjch","title":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow...","description":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.","status":"published","published":"2022-05-13T01:05:18Z","modified":"2023-02-01T05:02:52Z","updated_at":"2026-11-02T14:49:58.981291Z"}],"nvd":[{"id":"CVE-2012-4838","description":"IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.","status":"published","published":"2012-12-08T15:55:01.103Z","modified":"2026-06-16T23:45:46.25Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:02:16.958223Z"}]}}