CVE-2012-4614

The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.

Score

CVSS 2.0 9.3 Critical

Status

Modified - security_alert@emc.com

Published

2012-11-27

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• It Operations Intelligence (Emc)

References

• http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html
• http://osvdb.org/87877
• http://secunia.com/advisories/51408
• http://www.securityfocus.com/bid/56682
• http://www.securitytracker.com/id?1027812