CVE-2012-1843: CSRF

First published: Thu Mar 22 2012(Updated: )

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability."

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/author
• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/type
• agent/weakness
• collector/nvd-index
• vendor/quantum
• canonical/quantum scalar i500 firmware
• version/quantum scalar i500 firmware/i7.0.2
• version/quantum scalar i500 firmware/i2
• version/quantum scalar i500 firmware/i3
• version/quantum scalar i500 firmware/i3.1
• version/quantum scalar i500 firmware/i4
• version/quantum scalar i500 firmware/i5
• version/quantum scalar i500 firmware/i5.1
• version/quantum scalar i500 firmware/i6
• version/quantum scalar i500 firmware/i6.1
• version/quantum scalar i500 firmware/i7
• version/quantum scalar i500 firmware/i7.0.1
• version/quantum scalar i500 firmware/sp4
• version/quantum scalar i500 firmware/sp4.2
• canonical/quantum scalar i500
• version/quantum scalar i500/5u
• version/quantum scalar i500/14u
• version/quantum scalar i500/23u
• vendor/dell
• canonical/dell powervault ml6000 firmware
• version/dell powervault ml6000 firmware/585g.gs003
• canonical/dell powervault ml6000
• version/dell powervault ml6000/32u
• version/dell powervault ml6000/41u
• canonical/dell powervault ml6010
• version/dell powervault ml6010/5u
• canonical/dell powervault ml6020
• version/dell powervault ml6020/14u
• canonical/dell powervault ml6030
• version/dell powervault ml6030/23u