CVE-2012-1843 | BDVDB-2026-49669 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/48453
http://www.kb.cert.org/vuls/id/913483
http://osvdb.org/80227
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8
https://exchange.xforce.ibmcloud.com/vulnerabilities/74161
http://www.kb.cert.org/vuls/id/MAPG-8NVRPY
http://secunia.com/advisories/48403

Exploit#

No public exploit known

History#

Version 12012-03-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.