Code injection

The fabric-interconnect component in Cisco Unified Computing System UCS does not encrypt KVM virtual-media data, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug...

CVE-2012-4115

The fabric-interconnect component in Cisco Unified Computing System UCS does not encrypt KVM virtual-media data, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug...

CVE-2012-4115

CVE-2012-4115 affects Cisco UCS Fabric Interconnect: KVM virtual-media traffic is not encrypted, enabling MITM capture or modification of KVM traffic. NVD lists Confidentiality/Integrity impact as Partial, with Network attack vector and no authentication required. Cisco and Red Hat entries confir...