Security Advisory

CVE-2012-4073

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-09-20 16:00:00
Last updated 2024-08-06 20:28:06
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332.