CVE-2012-4090

2013-10-0510:55:03

CWE-264

[email protected]

web.nvd.nist.gov

cisco

nx-os

nexus 7000

remote authentication

configuration file

information security

cve-2012-4090

6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

64.6%

JSON

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.

Affected configurations

NVD

Node

cisconx-osMatch-

AND

cisconexus_7000Match-

cisconexus_7000_10-slotMatch-

cisconexus_7000_18-slotMatch-

cisconexus_7000_9-slotMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq-
cisco:nexus_7000cisco nexus 7000eq-
cisco:nexus_7000_10-slotcisco nexus 7000 10-sloteq-
cisco:nexus_7000_18-slotcisco nexus 7000 18-sloteq-
cisco:nexus_7000_9-slotcisco nexus 7000 9-sloteq-

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	-
cisco:nexus_7000	cisco nexus 7000	eq	-
cisco:nexus_7000_10-slot	cisco nexus 7000 10-slot	eq	-
cisco:nexus_7000_18-slot	cisco nexus 7000 18-slot	eq	-
cisco:nexus_7000_9-slot	cisco nexus 7000 9-slot	eq	-