CVE-2012-4092

Summary

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/55034
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092

References

• http://secunia.com/advisories/55034
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092

• ←Previous
• Next→