← Back

CVE-2012-1841

nvd nist
Published: Mar 22, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.

Affected (22)

Quantum
2 products
Scalar I500 Firmware
Scalar I500
Dell
5 products
Powervault Ml6000 Firmware
Powervault Ml6000
Powervault Ml6010
Powervault Ml6020
Powervault Ml6030
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Quantum
Scalar I500 Firmware
Up to i7.0.2
Scalar I500 Firmware
Version i2
Scalar I500 Firmware
Version i3.1
Scalar I500 Firmware
Version i3
Scalar I500 Firmware
Version i4
Scalar I500 Firmware
Version i5.1
Scalar I500 Firmware
Version i5
Scalar I500 Firmware
Version i6.1
Scalar I500 Firmware
Version i6
Scalar I500 Firmware
Version i7.0.1
Scalar I500 Firmware
Version i7
Scalar I500 Firmware
Version sp4.2
Scalar I500 Firmware
Version sp4
Quantum
Scalar I500
Version 14u
Scalar I500
Version 23u
Scalar I500
Version 5u
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Powervault Ml6000 Firmware
Version 585g.gs003
Dell
Powervault Ml6000
Version 32u
Powervault Ml6000
Version 41u
Powervault Ml6010
Version 5u
Powervault Ml6020
Version 14u
Powervault Ml6030
Version 23u

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource

Timeline

No history available yet.