Description
IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.
References
- fsm-cve20135424-expired-pw(87486) vdb-entry
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093938
- IC96952 vendor-advisory