CVE-2012-4092

Publication date

2013-09-26 10:00:00

Family

cisco

State

PUBLISHED

Description

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.