PT-2012-5518 · Emc · Emc Smarts Network Configuration Manager

Publicado 2012-11-27 · Atualizado 2013-08-17 · CVE-2012-4614

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager versions prior to 9.1

Description The default configuration of the software does not require authentication for database access, allowing remote attackers to have an unspecified impact via a network session.

Recommendations For versions prior to 9.1, update to version 9.1 or later to require authentication for database access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-4614

Produtos afetados

Emc Smarts Network Configuration Manager

Referências · 6

• http://securitytracker.com/id?1027812 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4614 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html · Nota
• http://securityfocus.com/bid/56682 · Nota
• http://osvdb.org/87877 · Nota
• http://secunia.com/advisories/51408 · Nota