Lucene search

PRIOn knowledge basePRION:CVE-2012-2282

HistoryJul 16, 2012 - 8:55 p.m.

Cross site request forgery (csrf)

2012-07-1620:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.4%

JSON

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.

CPENameOperatorVersion
celerra_network_servereq6.0.36.4
celerra_network_servereq6.0.60.2
vnxeq7.0.12.0
vnxeq7.0.53.1
vnxeeq2.0 sp2
vnxeeqmr1 sp1
vnxeeqmr1 sp3
vnxeeqmr1 sp3.1
vnxeeqmr2 sp0.1
vnxeeq2.0 sp3

Name	Operator	Version
celerra_network_server	eq	6.0.36.4
celerra_network_server	eq	6.0.60.2
vnx	eq	7.0.12.0
vnx	eq	7.0.53.1
vnxe	eq	2.0 sp2
vnxe	eq	mr1 sp1
vnxe	eq	mr1 sp3
vnxe	eq	mr1 sp3.1
vnxe	eq	mr2 sp0.1
vnxe	eq	2.0 sp3

Rows per page:

1-10 of 131

References

archives.neohapsis.com/archives/bugtraq/2012-07/0063.html

www.securitytracker.com/id?1027242

6.6 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.4%

JSON

Related for PRION:CVE-2012-2282