Back to search
CVE-2012-4073
Published: Sep 20, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1029068
vdb-entry
x_refsource_SECTRACK
20130917 Cisco Unified Computing System Software KVM Client Certificate Validation Vulnerability
vendor-advisory
x_refsource_CISCO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now