CVEvulnerability
CVE-2012-2282
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.
Affected configurations
• emc celerra network server 6.0.36.4
• emc celerra network server 6.0.60.2
• emc vnx 7.0.12.0
• emc vnx 7.0.53.1
• emc vnxe 2.0
• emc vnxe mr1
• emc vnxe mr2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html archives.neohapsis.com
- http://www.securitytracker.com/id?1027242 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html archives.neohapsis.com
- http://www.securitytracker.com/id?1027242 www.securitytracker.com