CVE-2012-4085

Cisco UCS Blade Management Controller IPMI exposes an information-disclosure vulnerability (CVE-2012-4085) that lets unauthenticated remote attackers enumerate valid usernames by observing IPMI responses. Root cause is a behavior difference in IPMI interface responses to invalid/valid usernames. ...