NVD

Id
42493  
Name
CVE-2012-0384  
Description
Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-03-29  
Modified Date
2013-03-25  
Seq
2012-0384  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214100 42493 CVE-2012-0384 20120328 Cisco IOS Software Command Authorization Bypass  View
214101 42493 CVE-2012-0384 52755  View
214102 42493 CVE-2012-0384 1026860  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26251 JVNDB-2012-001958 Cisco IOS および IOS XE におけるアクセス制限を回避される脆弱性 Cisco IOS および IOS XE には、AAA が有効であるとき、アクセス制限を回避される、または任意のコマンドを実行される脆弱性が存在します。 CVE-2012-0384 53622 CVE-2012-0384 42493 8.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001958.html 2012-03-28 2012-04-02 View