CVEvulnerability
CVE-2012-4614
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.
Affected configurations
• emc it operations intelligence (<= 9.0)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html archives.neohapsis.com
- http://osvdb.org/87877 osvdb.org
- http://secunia.com/advisories/51408 secunia.com
- http://www.securityfocus.com/bid/56682 www.securityfocus.com
- http://www.securitytracker.com/id?1027812 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html archives.neohapsis.com
- http://osvdb.org/87877 osvdb.org
- http://secunia.com/advisories/51408 secunia.com
- http://www.securityfocus.com/bid/56682 www.securityfocus.com
- http://www.securitytracker.com/id?1027812 www.securitytracker.com