CVE-2013-4038: IBM Bladecenter

Medium severity, CVSS 4.0. EPSS: 0.8% chance of exploitation in the next 30 days.

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.

Affected products

• IBM Bladecenter: version hs22 only; version hs22v only; version hs23 only; version hs23e only; version hx5 only
• IBM Flex System x220 Compute Node: affected versions not specified
• IBM Flex System x240 Compute Node: affected versions not specified
• IBM Flex System x440 Compute Node: affected versions not specified
• IBM System x3100 m4: affected versions not specified
• IBM System x3200 m3: affected versions not specified
• IBM System x3250 m3: affected versions not specified
• IBM System x3250 m4: affected versions not specified
• IBM System x3400 m2: affected versions not specified
• IBM System x3400 m3: affected versions not specified
• IBM System x3500 m2: affected versions not specified
• IBM System x3500 m3: affected versions not specified
• IBM System x3500 m4: affected versions not specified
• IBM System x3530 m4: affected versions not specified
• IBM System x3550 m2: affected versions not specified
• IBM System x3550 m3: affected versions not specified
• IBM System x3550 m4: affected versions not specified
• IBM System x3620 m3: affected versions not specified
• IBM System x3630 m3: affected versions not specified
• IBM System x3630 m4: affected versions not specified
• IBM System x3650 m2: affected versions not specified
• IBM System x3650 m3: affected versions not specified
• IBM System x3650 m4: affected versions not specified
• IBM System x3690 x5: affected versions not specified
• IBM System x3750 m4: affected versions not specified
• and 5 more

Published 2013-08-09. Last modified 2026-06-16.