PT-2012-3585
CVE-2012-1841
·
تاريخ النشر
2012-03-22
·
تاريخ التحديث
2018-01-10
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Quantum Scalar i500 tape library versions prior to i7.0.3 (604G.GS00100)
Dell ML6000 tape library versions prior to A20-00 (590G.GS00100)
Description
The issue allows remote attackers to read arbitrary files via a full pathname in the
file parameter of the logShow.htm page.Recommendations
For Quantum Scalar i500 tape library versions prior to i7.0.3 (604G.GS00100), update to version i7.0.3 (604G.GS00100) or later.
For Dell ML6000 tape library versions prior to A20-00 (590G.GS00100), update to version A20-00 (590G.GS00100) or later.
As a temporary workaround, consider restricting access to the logShow.htm page until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾