Unscored CVE-2012-4104 EUVD-2012-4048GHSA-c9g4-vpc7-w9mh

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System …

Published Oct 2, 2013 · Updated Sep 16, 2024 · Assigned by cisco

Description

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.

References

20130930 Cisco Unified Computing System Fabric Interconnect Directory Traversal Vulnerability vendor-advisory