CVE-2012-4092 | BDVDB-2026-57613 Detail

Description#

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/55034
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092

Exploit#

No public exploit known

History#

Version 12013-09-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.