Lucene search

[email protected]NVD:CVE-2012-1843

HistoryMar 22, 2012 - 10:17 a.m.

CVE-2012-1843

2012-03-2210:17:11

CWE-352

[email protected]

web.nvd.nist.gov

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

JSON

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a “command-injection vulnerability.”

Affected configurations

NVD

Node

quantumscalar_i500_firmwareRange≤i7.0.2

quantumscalar_i500_firmwareMatchi2

quantumscalar_i500_firmwareMatchi3

quantumscalar_i500_firmwareMatchi3.1

quantumscalar_i500_firmwareMatchi4

quantumscalar_i500_firmwareMatchi5

quantumscalar_i500_firmwareMatchi5.1

quantumscalar_i500_firmwareMatchi6

quantumscalar_i500_firmwareMatchi6.1

quantumscalar_i500_firmwareMatchi7

quantumscalar_i500_firmwareMatchi7.0.1

quantumscalar_i500_firmwareMatchsp4

quantumscalar_i500_firmwareMatchsp4.2

AND

quantumscalar_i500Match5u

quantumscalar_i500Match14u

quantumscalar_i500Match23u

Node

dellpowervault_ml6000_firmwareMatch585g.gs003

AND

dellpowervault_ml6000Match32u

dellpowervault_ml6000Match41u

dellpowervault_ml6010Match5u

dellpowervault_ml6020Match14u

dellpowervault_ml6030Match23u

References

osvdb.org/80227

secunia.com/advisories/48403

secunia.com/advisories/48453

www.kb.cert.org/vuls/id/913483

www.kb.cert.org/vuls/id/MAPG-8NNKN8

www.kb.cert.org/vuls/id/MAPG-8NVRPY

exchange.xforce.ibmcloud.com/vulnerabilities/74161

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

JSON

Related for NVD:CVE-2012-1843

cvelist1 prion1 cve1 cert1