PT-2012-4396 · Ixia · Breakingpoint Storm Appliance

Jeff Jarmoc · Published 2012-08-12 · Updated 2012-08-13 · CVE-2012-2963

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BreakingPoint Storm appliance versions prior to 3.0

Description The administrative interface in the embedded web server does not require authentication for the gwt/BugReport script, allowing remote attackers to obtain sensitive information by downloading a .tgz file.

Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-2963

Affected Products

Breakingpoint Storm Appliance

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-2963 · Security Note
• http://secureworks.com/research/advisories/SWRX-2012-005 · Note
• http://kb.cert.org/vuls/id/520430 · Note
• http://kb.cert.org/vuls/id/MAPG-8GANCC · Note