CVE-2012-4078

Cisco Unified Computing System - Authentication Bypass

Title source: rule

Description

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

References (3)

[Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029084

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/87367

Scores

EPSS 0.0092

EPSS Percentile 75.7%

Classification

CWE

CWE-287

Status draft

Affected Products (4)

cisco/unified_computing_system

Timeline

Published Sep 24, 2013

Tracked Since Feb 18, 2026