Lucene search

[email protected]CVE-2012-2282

HistoryJul 16, 2012 - 8:55 p.m.

CVE-2012-2282

2012-07-1620:55:00

CWE-264

[email protected]

web.nvd.nist.gov

emc

celerra

network server

vnx

vnxe

nfs

security vulnerability

access control

cve-2012-2282

6.3 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.9%

JSON

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.

CPENameOperatorVersion
emc:celerra_network_serveremc celerra network servereq6.0.36.4
emc:celerra_network_serveremc celerra network servereq6.0.60.2
emc:vnxemc vnxeq7.0.12.0
emc:vnxemc vnxeq7.0.53.1
emc:vnxeemc vnxeeq2.0
emc:vnxeemc vnxeeqmr1
emc:vnxeemc vnxeeqmr2

CPE	Name	Operator	Version
emc:celerra_network_server	emc celerra network server	eq	6.0.36.4
emc:celerra_network_server	emc celerra network server	eq	6.0.60.2
emc:vnx	emc vnx	eq	7.0.12.0
emc:vnx	emc vnx	eq	7.0.53.1
emc:vnxe	emc vnxe	eq	2.0
emc:vnxe	emc vnxe	eq	mr1
emc:vnxe	emc vnxe	eq	mr2

References

archives.neohapsis.com/archives/bugtraq/2012-07/0063.html

www.securitytracker.com/id?1027242

6.3 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.9%

JSON

Related for CVE-2012-2282

securityvulns2 prion1