Cisco Unified Computing System CVE-2012-4088 Hardcoded Password Security Bypass Vulnerability

Bugtraq ID:	62652
Class:	Design Error
CVE:	CVE-2012-4088
Remote:	Yes
Local:	No
Published:	Sep 25 2013 12:00AM
Updated:	Sep 28 2013 12:14AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i) Cisco Unified Computing System (UCS) 0
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4088 Hardcoded Password Security Bypass Vulnerability

Cisco Unified Computing System is prone to a security-bypass vulnerability.

Exploiting this issue could allow an attacker to bypass certain security restrictions and perform unauthorized actions.

This issue is being tracked by Cisco Bug ID CSCtg20769.

Cisco Unified Computing System CVE-2012-4088 Hardcoded Password Security Bypass Vulnerability

An attacker can carry out this attack using readily available network utilities.

Cisco Unified Computing System CVE-2012-4088 Hardcoded Password Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.