Vulnerability Description
VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Vcenter Chargeback Manager | <= 2.0.0 |
Related Weaknesses (CWE)
References
- http://www.vmware.com/security/advisories/VMSA-2012-0002.html
- http://www.vmware.com/security/advisories/VMSA-2012-0002.html
FAQ
What is CVE-2012-1472?
CVE-2012-1472 is a vulnerability with a CVSS score of 6.4 (MEDIUM). VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified v...
How severe is CVE-2012-1472?
CVE-2012-1472 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1472?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Vcenter Chargeback Manager.