Auth bypass in EMC It Operations Intelligence
CVE-2012-4614
The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.
Vulnerability class: Broken Authentication
EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.
Affected products
- Emc It_operations_intelligence
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (x_refsource_OSVDB, vdb-entry)