CVE-2012-4084

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing System (UCS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-40855.0The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System (UCCVE-2012-40865.1A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commandsCVE-2012-40875.1A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary CVE-2012-40884.3The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for rCVE-2012-40896.6MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management ContCVE-2012-40904.0The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file inforCVE-2012-40915.0The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)CVE-2012-40925.8The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity oCVE-2012-40934.6The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call HomeCVE-2012-40945.4Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers toCVE-2012-40955.5The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, anCVE-2012-40966.2The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privil
CVE-2012-4084: Medium severity, CVSS 6.8 | Vulnix