PT-2012-3924 · Emc · Emc Cloud Tiering Appliance Virtual Edition+1

Published 2012-08-29 · Updated 2017-08-29 · CVE-2012-2285

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC Cloud Tiering Appliance versions 9.0 and earlier EMC Cloud Tiering Appliance Virtual Edition versions 9.0 and earlier

Description The issue allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.

Recommendations For EMC Cloud Tiering Appliance versions 9.0 and earlier, update to a version later than 9.0. For EMC Cloud Tiering Appliance Virtual Edition versions 9.0 and earlier, update to a version later than 9.0.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-2285

Affected Products

Emc Cloud Tiering Appliance

Emc Cloud Tiering Appliance Virtual Edition

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2285 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78110 · Note
• http://secunia.com/advisories/50393 · Note
• http://osvdb.org/85050 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html · Note
• http://securitytracker.com/id?1027448 · Note