CVEvulnerability
CVE-2014-2276
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.
Affected configurations
• emc connectrix manager (<= 12.1.2)
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html archives.neohapsis.com
- http://secunia.com/advisories/57513 secunia.com
- http://www.securityfocus.com/bid/66308 www.securityfocus.com
- http://www.securitytracker.com/id/1029939 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91987 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html archives.neohapsis.com
- http://secunia.com/advisories/57513 secunia.com
- http://www.securityfocus.com/bid/66308 www.securityfocus.com
- http://www.securitytracker.com/id/1029939 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91987 exchange.xforce.ibmcloud.com