CVEvulnerability

CVE-2012-4104

6.6 MEDIUM Published 2013-10-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.

Affected configurations

• cisco unified computing system

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References