CVE-2012-2963 The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to o...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| breakingpointsystems breakingpoint storm appliance ctm | <= 2.0 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.2 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.4 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.5 | No fix listed |
| breakingpointsystems breakingpoint storm appliance | All versions | No fix listed |
References
- VU#520430 third-party-advisory us-government-resource
- www.kb.cert.org
- www.secureworks.com