CVE-2012-4090
Published Oct 5, 2013
Last updated 7 years ago
Overview
- Description
- The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA35D4AA-24B3-428E-84ED-804EF941E9A9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "459A7F11-52BF-4AD6-B495-4C4D6C050493"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]