CVE Vulnerabilities

CVE-2012-4078

Improper Authentication

Published: Sep 24, 2013 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
8.5 HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Unified_computing_system Cisco 1.0_base 1.0_base
Unified_computing_system Cisco 1.1(1m) 1.1(1m)
Unified_computing_system Cisco 1.0(2k) 1.0(2k)
Unified_computing_system Cisco 1.1_base 1.1_base

Potential Mitigations

References