Cisco Unified Computing System CVE-2012-4116 Information Disclosure Vulnerability

Bugtraq ID:	63212
Class:	Design Error
CVE:	CVE-2012-4116
Remote:	Yes
Local:	No
Published:	Oct 17 2013 12:00AM
Updated:	Oct 21 2013 12:18AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System (UCS) 2.0(1m) Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4116 Information Disclosure Vulnerability

Cisco Unified Computing System is prone to a remote information-disclosure vulnerability.

Successful exploits may allow an attacker to obtain sensitive information that may lead to further attacks.

This issue is tracked by Cisco Bug ID CSCtr72970.

Cisco Unified Computing System CVE-2012-4116 Information Disclosure Vulnerability

An attacker may use readily available tools to exploit this issue.

Cisco Unified Computing System CVE-2012-4116 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Computing System CVE-2012-4116 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )