First published: Sun Oct 13 2013(Updated: )
The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Unified Computing System software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4106 has been categorized as a high severity vulnerability due to its potential for privilege escalation.
To mitigate CVE-2012-4106, it is recommended to update the Cisco Unified Computing System software to the latest version that addresses this vulnerability.
CVE-2012-4106 affects local users of Cisco Unified Computing System who can execute scripts with elevated privileges.
An attacker exploiting CVE-2012-4106 could gain elevated privileges and execute arbitrary commands on the affected system.
Currently, there are no documented workarounds for CVE-2012-4106, so updating the software is the primary recommendation.