First published: Sun Oct 13 2013(Updated: )
The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Unified Computing System software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4107 has been classified with a high severity due to its potential for privilege escalation.
To mitigate CVE-2012-4107, update the Cisco Unified Computing System software to the latest patched version.
CVE-2012-4107 affects users with local access to the Cisco Unified Computing System components.
CVE-2012-4107 is a privilege escalation vulnerability that allows local users to execute arbitrary commands.
There is currently no indication that CVE-2012-4107 is being actively exploited in the wild.