CVE-2012-4111

The create certreq command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86563...

CVE-2012-4111

The CVE-2012-4111 issue affects Cisco UCS Fabric Interconnect’s create certreq command. An authenticated, local attacker can exploit unsanitized input to execute commands, obtaining a root shell on the underlying OS (Bug CSCtq86563). Cisco’s advisory confirms this local privilege escalation and t...