CVE-2012-4104

2013-10-0222:00:00

cisco

www.cve.org

cisco

ucs

path traversal

AI Score

6.3

Confidence

High

EPSS

Percentile

9.9%

JSON

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4104