Cisco Unified Computing System Identity Validation CVE-2012-4092 Security Bypass Vulnerability

Bugtraq ID:	62653
Class:	Design Error
CVE:	CVE-2012-4092
Remote:	Yes
Local:	No
Published:	Sep 25 2013 12:00AM
Updated:	Sep 28 2013 12:14AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System (UCS) 2.0(1m) Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System Identity Validation CVE-2012-4092 Security Bypass Vulnerability

Cisco Unified Computing System is prone to a security-bypass vulnerability.

An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCtk00683.

Cisco Unified Computing System Identity Validation CVE-2012-4092 Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco Unified Computing System Identity Validation CVE-2012-4092 Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].