PT-2012-3847 · Ibm · Ibm Scale Out Network Attached Storage

Publicado 2012-07-30 · Atualizado 2017-08-29 · CVE-2012-2163

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage (SONAS) versions 1.1 through 1.3.1

Description The issue allows remote authenticated administrators to execute arbitrary Linux commands, related to a code injection problem. This can be achieved via the Command Line Interface or the Graphical User Interface.

Recommendations For versions 1.1 through 1.3.1, consider restricting access to the Command Line Interface and Graphical User Interface to minimize the risk of exploitation until a fix is available. As a temporary workaround, limit the privileges of remote authenticated administrators to reduce the potential impact of arbitrary command execution.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2163

Produtos afetados

Ibm Scale Out Network Attached Storage

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2163 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75037 · Nota