CVE-2012-2285

Published: Aug 29, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.

Affected (2)

Products: Emc: Cloud Tiering Appliance, Cloud Tiering Appliance Virtual Edition

2 products

Cloud Tiering Appliance

Cloud Tiering Appliance Virtual Edition

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Emc Cloud Tiering Appliance	Up to 9.0
Emc Cloud Tiering Appliance Virtual Edition	Up to 9.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html

Source: security_alert@emc.com

http://osvdb.org/85050

Source: security_alert@emc.com

http://secunia.com/advisories/50393

Source: security_alert@emc.com

http://www.securitytracker.com/id?1027448

Source: security_alert@emc.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/78110

Source: security_alert@emc.com

http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/85050

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50393

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027448

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/78110

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.