Auth bypass in Cisco Unified Computing System
CVE-2012-4078
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Vulnerability class: Broken Authentication
EPSS: 0.035 (88.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system — versions 1.0\(2k\), 1.0_base, 1.1\(1m\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)