PT-2012-3924 · Emc · Emc Cloud Tiering Appliance Virtual Edition+1

Publicado 2012-08-29 · Atualizado 2017-08-29 · CVE-2012-2285

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC Cloud Tiering Appliance versions 9.0 and earlier EMC Cloud Tiering Appliance Virtual Edition versions 9.0 and earlier

Description The issue allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.

Recommendations For EMC Cloud Tiering Appliance versions 9.0 and earlier, update to a version later than 9.0. For EMC Cloud Tiering Appliance Virtual Edition versions 9.0 and earlier, update to a version later than 9.0.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-2285

Produtos afetados

Emc Cloud Tiering Appliance

Emc Cloud Tiering Appliance Virtual Edition

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78110 · Nota
• http://secunia.com/advisories/50393 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2285 · Nota de Segurança
• http://osvdb.org/85050 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html · Nota
• http://securitytracker.com/id?1027448 · Nota