Lucene search

[email protected]CVE-2012-1843

HistoryMar 22, 2012 - 10:17 a.m.

CVE-2012-1843

2012-03-2210:17:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-1843

csrf

vulnerability

quantum scalar i500

tape library

firmware

command injection

nvd

7.9 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

75.0%

JSON

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a “command-injection vulnerability.”

CPENameOperatorVersion
quantum:scalar_i500_firmwarequantum scalar i500 firmwarelei7.0.2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi2
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi3.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi4
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi5.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi6.1
quantum:scalar_i500_firmwarequantum scalar i500 firmwareeqi7

CPE	Name	Operator	Version
quantum:scalar_i500_firmware	quantum scalar i500 firmware	le	i7.0.2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i2
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i3.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i4
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i5.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i6.1
quantum:scalar_i500_firmware	quantum scalar i500 firmware	eq	i7

Rows per page:

1-10 of 221

References

osvdb.org/80227

secunia.com/advisories/48403

secunia.com/advisories/48453

www.kb.cert.org/vuls/id/913483

www.kb.cert.org/vuls/id/MAPG-8NNKN8

www.kb.cert.org/vuls/id/MAPG-8NVRPY

exchange.xforce.ibmcloud.com/vulnerabilities/74161

7.9 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for CVE-2012-1843

prion1 cvelist1 cert1