Vulnerability Description
EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Cloud Tiering Appliance Virtual Edition | <= 9.0 |
| Emc | Cloud Tiering Appliance | <= 9.0 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html
- http://osvdb.org/85050
- http://secunia.com/advisories/50393
- http://www.securitytracker.com/id?1027448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78110
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html
- http://osvdb.org/85050
- http://secunia.com/advisories/50393
- http://www.securitytracker.com/id?1027448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78110
FAQ
What is CVE-2012-2285?
CVE-2012-2285 is a vulnerability with a CVSS score of 6.8 (MEDIUM). EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access b...
How severe is CVE-2012-2285?
CVE-2012-2285 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-2285?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Cloud Tiering Appliance Virtual Edition, Emc Cloud Tiering Appliance.