CVE-2012-4084

Cisco UCS Fabric Interconnect web management interface CSRF vulnerability (CVE-2012-4084) allows unauthenticated remote attackers to hijack user authentication via cookie-based session handling. Exploitation would enable the attacker to perform actions as the affected user; Cisco notes that softw...

CVE-2012-4136

The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System UCS does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service peer-syncing outage via a...

CVE-2012-4136

The CVE-2012-4136 issue affects Cisco UCS Fabric Interconnect’s high-availability service. The root cause is improper binding of the cluster service to the management interface, which can let a remote attacker connected via Telnet access sensitive information or cause a peer‑syncing denial of ser...

CVE-2012-4136: Undefined Security Weakness

The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System UCS does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service peer-syncing outage via a...

CVE-2012-4109

The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559...

CVE-2012-4111

The create certreq command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86563...

CVE-2012-4102

The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600...

CVE-2012-4103

ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686...

CVE-2012-4104

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706...

CVE-2012-4095

The local file editor in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521...

Design/Logic Flaw

run-script in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560...

Command injection

The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600...

Command injection

The local file editor in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521...

Command injection

The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559...

Design/Logic Flaw

ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686...

Path traversal

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706...

CVE-2012-4102

The CVE-2012-4102 issue affects Cisco UCS Fabric Interconnect: the activate firmware command allows an authenticated, local attacker to inject commands by embedding them in an input parameter, due to improper input sanitization (Bug ID CSCtq02600). The vulnerability enables execution of Linux she...

CVE-2012-4104

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706...

CVE-2012-4095

The local file editor in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521...

CVE-2012-4111

The CVE-2012-4111 issue affects Cisco UCS Fabric Interconnect’s create certreq command. An authenticated, local attacker can exploit unsanitized input to execute commands, obtaining a root shell on the underlying OS (Bug CSCtq86563). Cisco’s advisory confirms this local privilege escalation and t...