Unrated severityNVD Advisory· Published Apr 13, 2009· Updated Apr 23, 2026
CVE-2009-1290
CVE-2009-1290
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script.
Affected products
1- cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.