CVE-2012-1843

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

CVE-2012-1844

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

Path traversal

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to read arbitrary files via a full pathname in...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

Default credentials

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

Cross site scripting

Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...

CVE-2012-1841

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to read arbitrary files via a full pathname in...

CVE-2012-1842

Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...

CVE-2012-1843

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

CVE-2012-1844

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

CVE-2012-1841

CVE-2012-1841 describes an absolute path traversal vulnerability in logShow.htm on Quantum Scalar i500 tape library (firmware before i7.0.3, 604G.GS00100) and the Dell ML6000 equivalent (firmware before A20-00, 590G.GS00100). The issue allows remote attackers to read arbitrary files by supplying ...

CVE-2012-1843

The CVE-2012-1843 issue affects Quantum Scalar i500 (and rebranded Dell ML6000/IBM TS3310) web interface: a CSRF in saveRestore.htm allows an authenticated remote user to cause execution of Linux commands via the fileName parameter, effectively hijacking user authentication and potentially runnin...

CVE-2012-1844

CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...

CVE-2012-1842

CVE-2012-1842 affects Quantum Scalar i500 (and rebranded/Dell ML6000, IBM TS3310) web interface. The vulnerability is a cross-site scripting flaw in checkQKMProg.htm that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected firmware versions: Quantum i500 befo...

PT-2012-3585

Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 604G.GS00100 Dell ML6000 tape library versions prior to A20-00 590G.GS00100 Description The issue allows remote attackers to read arbitrary files via a full pathname in the file paramet...

PT-2012-3586

Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 604G.GS00100 Dell ML6000 tape library versions prior to A20-00 590G.GS00100 Description A cross-site scripting XSS issue exists in the checkQKMProg.htm file, allowing remote attackers t...

PT-2012-3588

Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 604G.GS00100 Dell ML6000 tape library versions prior to A20-00 590G.GS00100 IBM TS3310 tape library versions prior to R6C 606G.GS001 Description The issue concerns the use of default...

PT-2012-3587

Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 604G.GS00100 Dell ML6000 tape library versions prior to A20-00 590G.GS00100 Description A cross-site request forgery CSRF issue exists in the saveRestore.htm file, allowing remote...

CVE-2012-1843: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

CVE-2012-1841: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to read arbitrary files via a full pathname in...