CVE-2012-4104: Path Traversal
Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4104?
CVE-2012-4104 is classified as a high severity vulnerability due to its potential to allow local users to overwrite or delete arbitrary files.
How do I fix CVE-2012-4104?
To fix CVE-2012-4104, ensure you apply the latest patches provided by Cisco for the Unified Computing System software.
Who is affected by CVE-2012-4104?
CVE-2012-4104 affects users of Cisco Unified Computing System software where the fabric-interconnect component is utilized.
What exploit does CVE-2012-4104 enable?
CVE-2012-4104 enables an absolute path traversal attack that can lead to arbitrary file overwriting or deletion by local users.
Is there a workaround for CVE-2012-4104?
Currently, there is no documented workaround for CVE-2012-4104, so patching is the recommended action.