CVE-2012-4838 — IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity

Back Back to CVE browser

LOW

IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity

Published Dec 8, 2012

1.9

LOW

CVSS 2.0

EPSS 0.35%

Description

IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.35% 0.00352

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00352

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.35% (0.00352)	26.47th	v5 (v2026.06.15)
Jun 15, 2026	0.35% (0.00352)	26.83th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00080)	21.21th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00890)	30.33th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00890)	28.64th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00890)	26.62th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00890)	12.04th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (3)

https://exchange.xforce.ibmcloud.com/vulnerabilities/79020
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001
x_refsource_CONFIRMBroken Link
https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/79020		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001		x_refsource_CONFIRMBroken Link
https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Dec 8, 2012

Updated Aug 6, 2024

Reserved Sep 6, 2012

Link CVE-2012-4838

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-4838

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-4838