Cisco Unified Computing System CVE-2012-4115 Information Disclosure Vulnerability

Bugtraq ID:	63208
Class:	Design Error
CVE:	CVE-2012-4115
Remote:	Yes
Local:	No
Published:	Oct 17 2013 12:00AM
Updated:	Oct 21 2013 12:18AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System (UCS) 2.0(1m) Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4115 Information Disclosure Vulnerability

Cisco Unified Computing System is prone to a remote information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information through man-in-the-middle attacks that may lead to further attacks.

This issue is tracked by Cisco Bug ID CSCtr72964.

Cisco Unified Computing System CVE-2012-4115 Information Disclosure Vulnerability

An attacker may use readily available tools to exploit this issue.

Cisco Unified Computing System CVE-2012-4115 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )