CVE

Id
57349  
CVE No.
CVE-2012-4106  
Status
Candidate  
Description
The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.  
Phase
Assigned (20120731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
591927 57349 CVE-2012-4106 CISCO:20131011 Cisco Unified Computing System Fabric Interconnect Privilege Escalation Vulnerability  View
591928 57349 CVE-2012-4106 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4106  View
591929 57349 CVE-2012-4106 BID:62981  View
591930 57349 CVE-2012-4106 URL:http://www.securityfocus.com/bid/62981  View
591931 57349 CVE-2012-4106 OSVDB:98354  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22899 JVNDB-2013-004474 Cisco Unified Computing System のファブリックインターコネクトコンポーネントにおける権限を取得される脆弱性 Cisco Unified Computing System (UCS) のファブリックインターコネクトコンポーネントの create certreq コマンドには、権限を取得される脆弱性が存在します。 CVE-2012-4111 57349 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004474.html  View