CVE-2012-3063

2012-06-2020:55:00

CWE-362

[email protected]

web.nvd.nist.gov

cisco

ace

cve-2012-3063

vulnerability

access restrictions

management ip

multicontext mode

6.1 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

49.4%

JSON

Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances, and read or modify configuration settings, via a login attempt to a context, aka Bug ID CSCts30631, a different vulnerability than CVE-2012-3058.

CPENameOperatorVersion
cisco:application_control_engine_softwarecisco application control engine softwareeqa3\(2.4\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa4\(2.1\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa3\(2.2\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa3\(2.5\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa4\(1.0\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa1\(8a\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa4\(2.2\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa1\(7\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa1\(7a\)
cisco:application_control_engine_softwarecisco application control engine softwareeqa5\(1.0\)

CPE	Name	Operator	Version
cisco:application_control_engine_software	cisco application control engine software	eq	a3\(2.4\)
cisco:application_control_engine_software	cisco application control engine software	eq	a4\(2.1\)
cisco:application_control_engine_software	cisco application control engine software	eq	a3\(2.2\)
cisco:application_control_engine_software	cisco application control engine software	eq	a3\(2.5\)
cisco:application_control_engine_software	cisco application control engine software	eq	a4\(1.0\)
cisco:application_control_engine_software	cisco application control engine software	eq	a1\(8a\)
cisco:application_control_engine_software	cisco application control engine software	eq	a4\(2.2\)
cisco:application_control_engine_software	cisco application control engine software	eq	a1\(7\)
cisco:application_control_engine_software	cisco application control engine software	eq	a1\(7a\)
cisco:application_control_engine_software	cisco application control engine software	eq	a5\(1.0\)